This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Website Connections

2 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Hi
I can't seem to connect to any microsoft website.. have tried McAfee & Symantec.. also the same problem… Any other website seems to be ok i.e. Google ect.
Here is my OTL.txt

OTL logfile created on: 22/11/2010 15:36:50 - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Documents and Settings\DaemonSkillz\Desktop
Windows XP Media Center Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy

1,014.00 Mb Total Physical Memory | 391.00 Mb Available Physical Memory | 39.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 75.00% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 37.25 Gb Total Space | 28.52 Gb Free Space | 76.55% Space Free | Partition Type: NTFS
Drive F: | 25.20 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: CHAOS | User Name: DaemonSkillz | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2010/11/22 15:32:59 | 000,575,488 | —- | M] (OldTimer Tools) – C:\Documents and Settings\DaemonSkillz\Desktop\OTL.exe
PRC - [2010/09/10 23:41:42 | 001,901,056 | —- | M] (COMODO) – C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
PRC - [2010/09/10 23:41:20 | 002,500,552 | —- | M] (COMODO) – C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
PRC - [2010/06/10 21:03:08 | 000,144,176 | —- | M] (Apple Inc.) – C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
PRC - [2010/01/28 13:48:00 | 010,035,448 | —- | M] (3Connect) – C:\Program Files\3 Mobile Broadband\3Connect\Wilog.exe
PRC - [2010/01/28 13:47:44 | 001,737,464 | —- | M] () – C:\Program Files\3 Mobile Broadband\3Connect\BecHelperService.exe
PRC - [2006/03/15 12:00:00 | 001,032,192 | —- | M] (Microsoft Corporation) – C:\WINDOWS\explorer.exe


========== Modules (SafeList) ==========

MOD - [2010/11/22 15:32:59 | 000,575,488 | —- | M] (OldTimer Tools) – C:\Documents and Settings\DaemonSkillz\Desktop\OTL.exe
MOD - [2010/09/10 23:41:40 | 000,285,480 | —- | M] (COMODO) – C:\WINDOWS\system32\guard32.dll
MOD - [2006/03/15 12:00:00 | 001,050,624 | —- | M] (Microsoft Corporation) – C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] – C:\WINDOWS\System32\hidserv.dll – (HidServ)
SRV - [2010/09/10 23:41:42 | 001,901,056 | —- | M] (COMODO) [Auto | Running] – C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe – (cmdAgent)
SRV - [2010/06/10 21:03:08 | 000,144,176 | —- | M] (Apple Inc.) [Auto | Running] – C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe – (Apple Mobile Device)
SRV - [2010/01/28 13:47:44 | 001,737,464 | —- | M] () [Auto | Running] – C:\Program Files\3 Mobile Broadband\3Connect\BecHelperService.exe – (BecHelperService)
SRV - [2006/03/15 12:00:00 | 000,168,509 | RHS- | M] () [Auto | Stopped] – C:\WINDOWS\system32\cvddqh.dll – (rvymwbqhz)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | Disabled | Stopped] – C:\WINDOWS\System32\03.tmp – (egcyb)
DRV - [2010/09/10 23:40:54 | 000,091,560 | —- | M] (COMODO) [Kernel | Boot | Running] – C:\WINDOWS\System32\DRIVERS\inspect.sys – (Inspect)
DRV - [2010/09/10 23:40:52 | 000,239,240 | —- | M] (COMODO) [File_System | System | Running] – C:\WINDOWS\system32\drivers\cmdGuard.sys – (cmdGuard)
DRV - [2010/09/10 23:40:52 | 000,025,240 | —- | M] (COMODO) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\cmdhlp.sys – (cmdHlp)
DRV - [2010/09/10 23:40:48 | 000,015,592 | —- | M] (COMODO) [File_System | System | Running] – C:\WINDOWS\system32\drivers\cmderd.sys – (cmderd)
DRV - [2010/01/28 13:35:24 | 000,010,240 | —- | M] () [Kernel | Auto | Running] – C:\WINDOWS\system32\drivers\mdvrmng.sys – (mdvrmng)
DRV - [2010/01/28 12:34:32 | 000,102,528 | —- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\ewusbmdm.sys – (hwdatacard)
DRV - [2010/01/28 12:34:32 | 000,100,736 | —- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\ewusbdev.sys – (hwusbdev)
DRV - [2005/09/12 08:49:44 | 003,298,432 | —- | M] (Intel® Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\w29n51.sys – (w29n51) Intel®
DRV - [2005/06/29 03:35:38 | 000,157,056 | —- | M] (Texas Instruments) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\tifm21.sys – (tifm21)
DRV - [2005/06/29 03:35:36 | 000,074,496 | —- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\Rtlnicxp.sys – (RTL8023xp)
DRV - [2005/06/29 03:35:34 | 001,041,536 | —- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\HSF_DP.sys – (HSF_DP)
DRV - [2005/06/29 03:35:34 | 000,685,184 | —- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\HSF_CNXT.sys – (winachsf)
DRV - [2005/06/29 03:35:34 | 000,346,496 | —- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\camc6hal.sys – (CAMCHALA)
DRV - [2005/06/29 03:35:34 | 000,200,064 | —- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\HSFHWICH.sys – (HSFHWICH)
DRV - [2005/06/29 03:35:34 | 000,037,760 | —- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\camc6aud.sys – (CAMCAUD)
DRV - [2004/08/03 23:00:52 | 000,028,672 | —- | M] (National Semiconductor Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\nscirda.sys – (NSCIRDA)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local



O1 HOSTS File: ([2006/03/15 12:00:00 | 000,000,734 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O4 - HKLM..\Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallVisualStyle = C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles (Microsoft)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallTheme = C:\WINDOWS\Resources\Themes\Royale.theme ()
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxsrvc.dll - C:\WINDOWS\System32\igfxsrvc.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\DaemonSkillz\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\DaemonSkillz\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/11/21 14:29:50 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O32 - AutoRun File - [2009/11/12 17:17:48 | 000,148,960 | R— | M] (Huawei Technologies Co., Ltd.) - F:\AutoRun.exe – [ CDFS ]
O32 - AutoRun File - [2008/12/08 16:24:46 | 000,027,750 | R— | M] () - F:\Autorun.ico – [ CDFS ]
O32 - AutoRun File - [2007/10/29 19:25:38 | 000,000,047 | R— | M] () - F:\AUTORUN.INF – [ CDFS ]
O33 - MountPoints2\{64d2cbe8-f57e-11df-a10e-ce9f2c395e95}\Shell - "" = AutoRun
O33 - MountPoints2\{64d2cbe8-f57e-11df-a10e-ce9f2c395e95}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{e96fd3f4-f584-11df-a112-00166fa94f03}\Shell - "" = AutoRun
O33 - MountPoints2\{e96fd3f4-f584-11df-a112-00166fa94f03}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{e96fd3f4-f584-11df-a112-00166fa94f03}\Shell\AutoRun\command - "" = E:\AutoRun.exe – File not found
O33 - MountPoints2\{e96fd3f8-f584-11df-a112-00166fa94f03}\Shell - "" = AutoRun
O33 - MountPoints2\{e96fd3f8-f584-11df-a112-00166fa94f03}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{e96fd3f8-f584-11df-a112-00166fa94f03}\Shell\AutoRun\command - "" = F:\AutoRun.exe – [2009/11/12 17:17:48 | 000,148,960 | R— | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\E\Shell - "" = AutoRun
O33 - MountPoints2\E\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\AutoRun.exe – File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: HidServ - C:\WINDOWS\System32\hidserv.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: rvymwbqhz - C:\WINDOWS\system32\cvddqh.dll ()

Drivers32: msacm.ac3acm - C:\WINDOWS\System32\ac3acm.acm (fccHandler)
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - C:\WINDOWS\System32\lameACM.acm (http://www.mp3dev.org/)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\WINDOWS\System32\ff_vfw.dll ()
Drivers32: VIDC.HFYU - C:\WINDOWS\System32\huffyuv.dll (Disappearing Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: VIDC.VP70 - C:\WINDOWS\System32\vp7vfw.dll (On2.com)
Drivers32: VIDC.XVID - C:\WINDOWS\System32\xvidvfw.dll ()
Drivers32: VIDC.YV12 - C:\WINDOWS\System32\yv12vfw.dll (www.helixcommunity.org)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point (54619756233228288)

========== Files/Folders - Created Within 30 Days ==========

[2010/11/22 15:39:30 | 000,388,608 | —- | C] (Trend Micro Inc.) – C:\Documents and Settings\DaemonSkillz\Desktop\HiJackThis.exe
[2010/11/22 15:32:59 | 000,575,488 | —- | C] (OldTimer Tools) – C:\Documents and Settings\DaemonSkillz\Desktop\OTL.exe
[2010/11/22 14:46:58 | 000,000,000 | -HSD | C] – C:\Documents and Settings\All Users\Documents\MCE Logs
[2010/11/22 14:00:04 | 000,000,000 | —D | C] – C:\Program Files\COMODO
[2010/11/22 13:51:35 | 000,000,000 | —D | C] – C:\WINDOWS\System32\appmgmt
[2010/11/22 13:10:41 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Comodo
[2010/11/21 17:12:08 | 000,000,000 | —D | C] – C:\Documents and Settings\DaemonSkillz\Application Data\WinRAR
[2010/11/21 17:11:13 | 000,000,000 | —D | C] – C:\Program Files\WinRAR
[2010/11/21 16:57:17 | 000,000,000 | —D | C] – C:\Documents and Settings\DaemonSkillz\My Documents\Vista Icons
[2010/11/21 16:51:30 | 000,000,000 | —D | C] – C:\Documents and Settings\DaemonSkillz\My Documents\SHORTCUTS
[2010/11/21 16:49:55 | 000,000,000 | —D | C] – C:\Documents and Settings\DaemonSkillz\My Documents\TXT Files
[2010/11/21 16:49:34 | 000,000,000 | —D | C] – C:\Documents and Settings\DaemonSkillz\My Documents\CV & Cover Letter
[2010/11/21 16:31:31 | 000,000,000 | R–D | C] – C:\Documents and Settings\DaemonSkillz\My Documents\My Videos
[2010/11/21 16:29:59 | 000,839,680 | —- | C] (http://www.mp3dev.org/) – C:\WINDOWS\System32\lameACM.acm
[2010/11/21 16:29:59 | 000,630,784 | —- | C] (On2.com) – C:\WINDOWS\System32\vp7vfw.dll
[2010/11/21 16:29:59 | 000,217,088 | —- | C] (www.helixcommunity.org) – C:\WINDOWS\System32\yv12vfw.dll
[2010/11/21 16:29:59 | 000,118,784 | —- | C] (fccHandler) – C:\WINDOWS\System32\ac3acm.acm
[2010/11/21 16:29:59 | 000,039,936 | —- | C] (Disappearing Inc.) – C:\WINDOWS\System32\huffyuv.dll
[2010/11/21 16:29:55 | 000,000,000 | —D | C] – C:\Program Files\K-Lite Codec Pack
[2010/11/21 16:22:16 | 000,000,000 | —D | C] – C:\Documents and Settings\DaemonSkillz\Application Data\Apple Computer
[2010/11/21 16:21:30 | 000,107,368 | —- | C] (GEAR Software Inc.) – C:\WINDOWS\System32\GEARAspi.dll
[2010/11/21 16:20:40 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2010/11/21 16:20:28 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2010/11/21 16:20:28 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2010/11/21 16:19:17 | 000,000,000 | —D | C] – C:\Program Files\QuickTime
[2010/11/21 16:19:14 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Apple Computer
[2010/11/21 16:19:03 | 000,000,000 | —D | C] – C:\Documents and Settings\DaemonSkillz\Local Settings\Application Data\Apple
[2010/11/21 16:18:59 | 000,000,000 | —D | C] – C:\Program Files\Apple Software Update
[2010/11/21 16:18:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\DRVSTORE
[2010/11/21 16:18:30 | 000,000,000 | —D | C] – C:\Program Files\Bonjour
[2010/11/21 16:18:14 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Apple
[2010/11/21 16:18:14 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Apple
[2010/11/21 16:17:43 | 000,000,000 | —D | C] – C:\Documents and Settings\DaemonSkillz\Local Settings\Application Data\Apple Computer
[2010/11/21 16:13:10 | 000,000,000 | RH-D | C] – C:\Documents and Settings\DaemonSkillz\Recent
[2010/11/21 15:54:28 | 000,000,000 | -HSD | C] – C:\Documents and Settings\DaemonSkillz\IECompatCache
[2010/11/21 15:52:57 | 000,000,000 | -HSD | C] – C:\Documents and Settings\DaemonSkillz\PrivacIE
[2010/11/21 15:50:13 | 000,000,000 | -HSD | C] – C:\Documents and Settings\DaemonSkillz\IETldCache
[2010/11/21 15:48:09 | 000,000,000 | —D | C] – C:\WINDOWS\WBEM
[2010/11/21 15:47:44 | 000,016,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spmsg.dll
[2010/11/21 15:46:36 | 000,000,000 | -H-D | C] – C:\WINDOWS\ie8
[2010/11/21 15:46:36 | 000,000,000 | —D | C] – C:\WINDOWS\System32\en-US
[2010/11/21 15:38:53 | 000,000,000 | —D | C] – C:\Documents and Settings\DaemonSkillz\Application Data\Macromedia
[2010/11/21 15:38:51 | 000,000,000 | —D | C] – C:\Documents and Settings\DaemonSkillz\Application Data\Adobe
[2010/11/21 15:38:45 | 000,000,000 | —D | C] – C:\Documents and Settings\DaemonSkillz\Application Data\Birdstep Technology
[2010/11/21 15:36:47 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Birdstep Technology
[2010/11/21 15:36:46 | 000,000,000 | —D | C] – C:\Documents and Settings\LocalService\Application Data\Birdstep Technology
[2010/11/21 15:36:23 | 000,113,280 | —- | C] (Huawei Technologies Co., Ltd.) – C:\WINDOWS\System32\drivers\ewusbnet.sys
[2010/11/21 15:36:23 | 000,102,528 | —- | C] (Huawei Technologies Co., Ltd.) – C:\WINDOWS\System32\drivers\ewusbmdm.sys
[2010/11/21 15:36:23 | 000,100,736 | —- | C] (Huawei Technologies Co., Ltd.) – C:\WINDOWS\System32\drivers\ewusbdev.sys
[2010/11/21 15:36:23 | 000,024,448 | —- | C] (Huawei Tech. Co., Ltd.) – C:\WINDOWS\System32\drivers\ewdcsc.sys
[2010/11/21 15:36:19 | 000,000,000 | —D | C] – C:\Program Files\Huawei Modems
[2010/11/21 15:36:03 | 000,000,000 | —D | C] – C:\Program Files\3 Mobile Broadband
[2010/11/21 15:34:42 | 000,031,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbccgp.sys
[2010/11/21 15:10:42 | 000,000,000 | —D | C] – C:\WINDOWS\RegisteredPackages
[2010/11/21 15:07:47 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\irbus.sys
[2010/11/21 15:06:29 | 000,026,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spupdsvc.exe
[2010/11/21 15:03:03 | 000,000,000 | —D | C] – C:\WINDOWS\System32\URTTemp
[2010/11/21 15:01:39 | 000,000,000 | —D | C] – C:\Documents and Settings\DaemonSkillz\Local Settings\Application Data\ApplicationHistory
[2010/11/21 14:59:24 | 000,159,744 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\igfxres.dll
[2010/11/21 14:55:10 | 000,006,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\splitter.sys
[2010/11/21 14:55:07 | 000,082,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wdmaud.sys
[2010/11/21 14:55:04 | 000,052,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dmusic.sys
[2010/11/21 14:54:59 | 000,054,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swmidi.sys
[2010/11/21 14:54:57 | 000,142,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aec.sys
[2010/11/21 14:54:54 | 000,171,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kmixer.sys
[2010/11/21 14:54:52 | 000,002,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\drmkaud.sys
[2010/11/21 14:54:50 | 000,060,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sysaudio.sys
[2010/11/21 14:54:48 | 000,007,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mskssrv.sys
[2010/11/21 14:54:45 | 000,004,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mspqm.sys
[2010/11/21 14:54:43 | 000,005,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mspclock.sys
[2010/11/21 14:54:37 | 000,145,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\portcls.sys
[2010/11/21 14:54:37 | 000,145,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\portcls.sys
[2010/11/21 14:54:36 | 000,060,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\drmk.sys
[2010/11/21 14:54:36 | 000,060,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\drmk.sys
[2010/11/21 14:54:35 | 000,130,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ksproxy.ax
[2010/11/21 14:54:35 | 000,130,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ksproxy.ax
[2010/11/21 14:54:35 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ksuser.dll
[2010/11/21 14:54:35 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ksuser.dll
[2010/11/21 14:54:04 | 000,000,000 | —D | C] – C:\Program Files\CONEXANT
[2010/11/21 14:50:34 | 000,000,000 | —D | C] – C:\Program Files\Intel
[2010/11/21 14:49:46 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ReinstallBackups
[2010/11/21 14:49:43 | 000,000,000 | -H-D | C] – C:\Program Files\InstallShield Installation Information
[2010/11/21 14:49:34 | 000,000,000 | —D | C] – C:\Program Files\Common Files\InstallShield
[2010/11/21 14:48:18 | 000,026,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbstor.sys
[2010/11/21 14:42:51 | 000,000,000 | -HSD | C] – C:\RECYCLER
[2010/11/21 14:39:21 | 000,000,000 | —D | C] – C:\Documents and Settings\DaemonSkillz\Application Data\Identities
[2010/11/21 14:39:17 | 000,000,000 | R–D | C] – C:\Documents and Settings\DaemonSkillz\My Documents\My Pictures
[2010/11/21 14:39:17 | 000,000,000 | R–D | C] – C:\Documents and Settings\DaemonSkillz\My Documents\My Music
[2010/11/21 14:39:15 | 000,000,000 | –SD | C] – C:\Documents and Settings\DaemonSkillz\Application Data\Microsoft
[2010/11/21 14:39:15 | 000,000,000 | RH-D | C] – C:\Documents and Settings\DaemonSkillz\SendTo
[2010/11/21 14:39:15 | 000,000,000 | RH-D | C] – C:\Documents and Settings\DaemonSkillz\Application Data
[2010/11/21 14:39:15 | 000,000,000 | R–D | C] – C:\Documents and Settings\DaemonSkillz\Start Menu
[2010/11/21 14:39:15 | 000,000,000 | R–D | C] – C:\Documents and Settings\DaemonSkillz\My Documents
[2010/11/21 14:39:15 | 000,000,000 | R–D | C] – C:\Documents and Settings\DaemonSkillz\Favorites
[2010/11/21 14:39:15 | 000,000,000 | -HSD | C] – C:\Documents and Settings\DaemonSkillz\Cookies
[2010/11/21 14:39:15 | 000,000,000 | -H-D | C] – C:\Documents and Settings\DaemonSkillz\Templates
[2010/11/21 14:39:15 | 000,000,000 | -H-D | C] – C:\Documents and Settings\DaemonSkillz\PrintHood
[2010/11/21 14:39:15 | 000,000,000 | -H-D | C] – C:\Documents and Settings\DaemonSkillz\NetHood
[2010/11/21 14:39:15 | 000,000,000 | -H-D | C] – C:\Documents and Settings\DaemonSkillz\Local Settings
[2010/11/21 14:39:15 | 000,000,000 | —D | C] – C:\Documents and Settings\DaemonSkillz\Local Settings\Application Data\Microsoft
[2010/11/21 14:39:15 | 000,000,000 | —D | C] – C:\Documents and Settings\DaemonSkillz\Desktop
[2010/11/21 14:35:59 | 000,000,000 | -H-D | C] – C:\Program Files\Uninstall Information
[2010/11/21 14:35:41 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Documents\Recorded TV
[2010/11/21 14:35:19 | 000,000,000 | —D | C] – C:\WINDOWS\SoftwareDistribution
[2010/11/21 14:35:12 | 000,000,000 | —D | C] – C:\WINDOWS\Prefetch
[2010/11/21 14:35:11 | 000,000,000 | –SD | C] – C:\WINDOWS\System32\Microsoft
[2010/11/21 14:35:09 | 000,000,000 | —D | C] – C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2010/11/21 14:35:08 | 000,000,000 | –SD | C] – C:\Documents and Settings\LocalService\Application Data\Microsoft
[2010/11/21 14:34:52 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2010/11/21 14:34:51 | 000,000,000 | –SD | C] – C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2010/11/21 14:33:26 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpns.dll
[2010/11/21 14:33:20 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winzm.ime
[2010/11/21 14:33:20 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winsp.ime
[2010/11/21 14:33:19 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winpy.ime
[2010/11/21 14:33:19 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winime.ime
[2010/11/21 14:33:18 | 000,079,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winar30.ime
[2010/11/21 14:33:18 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wingb.ime
[2010/11/21 14:33:17 | 000,041,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.dll
[2010/11/21 14:33:17 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.sys
[2010/11/21 14:33:15 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wam51.dll
[2010/11/21 14:33:15 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wamreg51.dll
[2010/11/21 14:33:15 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wamps51.dll
[2010/11/21 14:33:14 | 000,363,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3svc.dll
[2010/11/21 14:33:14 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3ext.dll
[2010/11/21 14:33:14 | 000,048,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w32.dll
[2010/11/21 14:33:14 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3svapi.dll
[2010/11/21 14:33:14 | 000,004,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3ctrs51.dll
[2010/11/21 14:33:13 | 000,426,041 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\voicepad.dll
[2010/11/21 14:33:13 | 000,086,073 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\voicesub.dll
[2010/11/21 14:33:10 | 000,103,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uihelper.dll
[2010/11/21 14:33:10 | 000,076,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uniime.dll
[2010/11/21 14:33:10 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unicdime.ime
[2010/11/21 14:33:09 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsprof.exe
[2010/11/21 14:33:08 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tools.dll
[2010/11/21 14:33:08 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tmigrate.dll
[2010/11/21 14:33:07 | 000,571,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintlgnt.ime
[2010/11/21 14:33:07 | 000,455,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintsetp.exe
[2010/11/21 14:33:07 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintlphr.exe
[2010/11/21 14:33:06 | 000,185,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\thawbrkr.dll
[2010/11/21 14:33:06 | 000,021,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdipx.sys
[2010/11/21 14:33:06 | 000,019,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdspx.sys
[2010/11/21 14:33:06 | 000,013,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdasync.sys
[2010/11/21 14:33:04 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\svcext51.dll
[2010/11/21 14:33:03 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sspifilt.dll
[2010/11/21 14:33:03 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\status.dll
[2010/11/21 14:33:02 | 000,101,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srusbusd.dll
[2010/11/21 14:33:02 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ssinc51.dll
[2010/11/21 14:32:59 | 000,143,422 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\softkey.dll
[2010/11/21 14:32:59 | 000,040,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snmpthrd.dll
[2010/11/21 14:32:59 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snmpstup.dll
[2010/11/21 14:32:59 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snmptrap.exe
[2010/11/21 14:32:59 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll
[2010/11/21 14:32:58 | 000,358,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snmpincl.dll
[2010/11/21 14:32:58 | 000,259,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snmpcl.dll
[2010/11/21 14:32:58 | 000,188,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snmpsmir.dll
[2010/11/21 14:32:58 | 000,032,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snmp.exe
[2010/11/21 14:32:58 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snmpmib.dll
[2010/11/21 14:32:57 | 000,456,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smtpsvc.dll
[2010/11/21 14:32:57 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll
[2010/11/21 14:32:57 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smtpapi.dll
[2010/11/21 14:32:57 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smimsgif.dll
[2010/11/21 14:32:57 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsy.dll
[2010/11/21 14:32:56 | 000,236,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smi2smir.exe
[2010/11/21 14:32:56 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm9aw.dll
[2010/11/21 14:32:56 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb6w.dll
[2010/11/21 14:32:56 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sma3w.dll
[2010/11/21 14:32:56 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm93w.dll
[2010/11/21 14:32:56 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm92w.dll
[2010/11/21 14:32:56 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm90w.dll
[2010/11/21 14:32:56 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8dw.dll
[2010/11/21 14:32:56 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsm.dll
[2010/11/21 14:32:55 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm87w.dll
[2010/11/21 14:32:55 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm81w.dll
[2010/11/21 14:32:55 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8cw.dll
[2010/11/21 14:32:55 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8aw.dll
[2010/11/21 14:32:55 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm89w.dll
[2010/11/21 14:32:55 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm59w.dll
[2010/11/21 14:32:55 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\simptcp.dll
[2010/11/21 14:32:50 | 000,221,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\seo.dll
[2010/11/21 14:32:50 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_seos.dll
[2010/11/21 14:32:49 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_scripto.dll
[2010/11/21 14:32:47 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia330.dll
[2010/11/21 14:32:47 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia001.dll
[2010/11/21 14:32:47 | 000,026,624 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rw330ext.dll
[2010/11/21 14:32:47 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rw001ext.dll
[2010/11/21 14:32:47 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rwnh.dll
[2010/11/21 14:32:46 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rpcref.dll
[2010/11/21 14:32:45 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\romanime.ime
[2010/11/21 14:32:45 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_regtrace.exe
[2010/11/21 14:32:44 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\register.exe
[2010/11/21 14:32:42 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\quick.ime
[2010/11/21 14:32:42 | 000,020,736 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ramdisk.sys
[2010/11/21 14:32:42 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\quser.exe
[2010/11/21 14:32:41 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\query.exe
[2010/11/21 14:32:40 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pwsdata.dll
[2010/11/21 14:32:38 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxviceo.dll
[2010/11/21 14:32:38 | 000,070,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlphr.exe
[2010/11/21 14:32:38 | 000,067,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmigrate.dll
[2010/11/21 14:32:38 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxmcro.dll
[2010/11/21 14:32:38 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxgl.dll
[2010/11/21 14:32:37 | 000,482,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlgnt.ime
[2010/11/21 14:32:37 | 000,079,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phon.ime
[2010/11/21 14:32:37 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlcsd.dll
[2010/11/21 14:32:37 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\permchk.dll
[2010/11/21 14:32:36 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pagecnt.dll
[2010/11/21 14:32:36 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs804.dll
[2010/11/21 14:32:35 | 000,036,927 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs411.dll
[2010/11/21 14:32:35 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs404.dll
[2010/11/21 14:32:35 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs412.dll
[2010/11/21 14:32:32 | 000,226,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\npdrmv2.dll
[2010/11/21 14:32:32 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nsepm.dll
[2010/11/21 14:32:32 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll
[2010/11/21 14:32:30 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nextlink.dll
[2010/11/21 14:32:27 | 000,229,439 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\multibox.dll
[2010/11/21 14:32:27 | 000,111,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mtstocom.exe
[2010/11/21 14:32:22 | 001,875,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.lex
[2010/11/21 14:32:22 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msiregmv.exe
[2010/11/21 14:32:21 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.dll
[2010/11/21 14:32:13 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\migregdb.exe
[2010/11/21 14:32:12 | 000,092,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.sys
[2010/11/21 14:32:12 | 000,092,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.dll
[2010/11/21 14:32:12 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\metada51.dll
[2010/11/21 14:32:12 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mdsync.dll
[2010/11/21 14:32:11 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll
[2010/11/21 14:32:11 | 000,037,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\md5filt.dll
[2010/11/21 14:32:10 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\lprmon.dll
[2010/11/21 14:32:09 | 000,022,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\lpdsvc.dll
[2010/11/21 14:32:09 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\logscrpt.dll
[2010/11/21 14:32:09 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\lonsint.dll
[2010/11/21 14:32:08 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\lmmib2.dll
[2010/11/21 14:32:07 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\korwbrkr.dll
[2010/11/21 14:32:06 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth3.dll
[2010/11/21 14:32:06 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth2.dll
[2010/11/21 14:32:06 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdvntc.dll
[2010/11/21 14:32:06 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdusa.dll
[2010/11/21 14:32:06 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdurdu.dll
[2010/11/21 14:32:06 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth1.dll
[2010/11/21 14:32:06 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth0.dll
[2010/11/21 14:32:06 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr2.dll
[2010/11/21 14:32:06 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr1.dll
[2010/11/21 14:32:05 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecat.dll
[2010/11/21 14:32:05 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecnt.dll
[2010/11/21 14:32:05 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnec95.dll
[2010/11/21 14:32:05 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlk41a.dll
[2010/11/21 14:32:05 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlk41j.dll
[2010/11/21 14:32:04 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdibm02.dll
[2010/11/21 14:32:04 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinpun.dll
[2010/11/21 14:32:04 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintel.dll
[2010/11/21 14:32:04 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintam.dll
[2010/11/21 14:32:04 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinmar.dll
[2010/11/21 14:32:04 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinkan.dll
[2010/11/21 14:32:04 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinhin.dll
[2010/11/21 14:32:04 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinguj.dll
[2010/11/21 14:32:04 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdindev.dll
[2010/11/21 14:32:03 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdheb.dll
[2010/11/21 14:32:03 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdfa.dll
[2010/11/21 14:32:03 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv2.dll
[2010/11/21 14:32:03 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv1.dll
[2010/11/21 14:32:03 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdgeo.dll
[2010/11/21 14:32:02 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jupiw.dll
[2010/11/21 14:32:02 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdax2.dll
[2010/11/21 14:32:02 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd106n.dll
[2010/11/21 14:32:02 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101a.dll
[2010/11/21 14:32:02 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101.dll
[2010/11/21 14:32:02 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda3.dll
[2010/11/21 14:32:02 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda2.dll
[2010/11/21 14:32:02 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda1.dll
[2010/11/21 14:32:02 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarmw.dll
[2010/11/21 14:32:02 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarme.dll
[2010/11/21 14:32:01 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iscomlog.dll
[2010/11/21 14:32:01 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iwrps.dll
[2010/11/21 14:32:01 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\isapips.dll
[2010/11/21 14:32:00 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iprip.dll
[2010/11/21 14:31:59 | 000,315,452 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imskf.dll
[2010/11/21 14:31:59 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\infocomm.dll
[2010/11/21 14:31:59 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetin51.exe
[2010/11/21 14:31:59 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\infoctrs.dll
[2010/11/21 14:31:58 | 000,471,102 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imskdic.dll
[2010/11/21 14:31:58 | 000,274,489 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjputyc.dll
[2010/11/21 14:31:58 | 000,262,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjputy.exe
[2010/11/21 14:31:58 | 000,102,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imlang.dll
[2010/11/21 14:31:58 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imkrinst.exe
[2010/11/21 14:31:57 | 000,307,257 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdct.exe
[2010/11/21 14:31:57 | 000,233,527 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjprw.exe
[2010/11/21 14:31:57 | 000,208,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpmig.exe
[2010/11/21 14:31:57 | 000,155,705 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdsvr.exe
[2010/11/21 14:31:57 | 000,081,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdct.dll
[2010/11/21 14:31:57 | 000,045,109 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpuex.exe
[2010/11/21 14:31:56 | 000,811,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjp81k.dll
[2010/11/21 14:31:56 | 000,716,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpcus.dll
[2010/11/21 14:31:56 | 000,368,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpcic.dll
[2010/11/21 14:31:56 | 000,057,398 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdadm.exe
[2010/11/21 14:31:55 | 000,340,023 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjp81.ime
[2010/11/21 14:31:55 | 000,311,359 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsv.exe
[2010/11/21 14:31:55 | 000,106,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrcic.dll
[2010/11/21 14:31:55 | 000,102,463 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsm.dll
[2010/11/21 14:31:55 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekr61.ime
[2010/11/21 14:31:55 | 000,086,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrmbx.dll
[2010/11/21 14:31:55 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrmig.exe
[2010/11/21 14:31:54 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iislog51.dll
[2010/11/21 14:31:54 | 000,060,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisclex4.dll
[2010/11/21 14:31:54 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iiscrmap.dll
[2010/11/21 14:31:54 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisfecnv.dll
[2010/11/21 14:31:54 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iissync.exe
[2010/11/21 14:31:54 | 000,003,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iismui.dll
[2010/11/21 14:31:53 | 000,145,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iische51.dll
[2010/11/21 14:31:53 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisadmin.dll
[2010/11/21 14:31:47 | 010,129,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxkor.dll
[2010/11/21 14:31:36 | 010,096,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxcht.dll
[2010/11/21 14:31:36 | 000,268,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\httpext.dll
[2010/11/21 14:31:36 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\httpod51.dll
[2010/11/21 14:31:36 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\httpmb51.dll
[2010/11/21 14:31:35 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hostmib.dll
[2010/11/21 14:31:34 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hanjadic.dll
[2010/11/21 14:31:33 | 000,032,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\gzip.dll
[2010/11/21 14:31:32 | 000,400,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsxp32.dll
[2010/11/21 14:31:32 | 000,397,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxstiff.dll
[2010/11/21 14:31:32 | 000,192,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxswzrd.dll
[2010/11/21 14:31:32 | 000,154,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsui.dll
[2010/11/21 14:31:31 | 000,562,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsst.dll
[2010/11/21 14:31:31 | 000,267,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxssvc.exe
[2010/11/21 14:31:31 | 000,246,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxst30.dll
[2010/11/21 14:31:31 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsevent.dll
[2010/11/21 14:31:31 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsroute.dll
[2010/11/21 14:31:31 | 000,027,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsdrv.dll
[2010/11/21 14:31:31 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsmon.dll
[2010/11/21 14:31:31 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsext32.dll
[2010/11/21 14:31:31 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxssend.exe
[2010/11/21 14:31:31 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsperf.dll
[2010/11/21 14:31:31 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsres.dll
[2010/11/21 14:31:30 | 000,452,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsapi.dll
[2010/11/21 14:31:30 | 000,285,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscomex.dll
[2010/11/21 14:31:30 | 000,229,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscover.exe
[2010/11/21 14:31:30 | 000,143,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsclnt.exe
[2010/11/21 14:31:30 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsclntr.dll
[2010/11/21 14:31:30 | 000,111,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscfgwz.dll
[2010/11/21 14:31:30 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscom.dll
[2010/11/21 14:31:29 | 000,125,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftpsv251.dll
[2010/11/21 14:31:29 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftpctrs2.dll
[2010/11/21 14:31:29 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftpmib.dll
[2010/11/21 14:31:29 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftlx041e.dll
[2010/11/21 14:31:28 | 000,618,605 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp4autl.dll
[2010/11/21 14:31:28 | 000,024,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fpadmcgi.exe
[2010/11/21 14:31:28 | 000,020,541 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fpadmdll.dll
[2010/11/21 14:31:27 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\flattemp.exe
[2010/11/21 14:31:26 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\evntagnt.dll
[2010/11/21 14:31:26 | 000,092,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\evntwin.exe
[2010/11/21 14:31:26 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll
[2010/11/21 14:31:26 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\evntcmd.exe
[2010/11/21 14:31:26 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\exstrace.dll
[2010/11/21 14:31:26 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\f3ahvoas.dll
[2010/11/21 14:31:25 | 000,057,856 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuimgd.dll
[2010/11/21 14:31:25 | 000,045,056 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esunid.dll
[2010/11/21 14:31:25 | 000,031,744 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esucmd.dll
[2010/11/21 14:31:25 | 000,025,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\et4000.sys
[2010/11/21 14:31:24 | 000,514,587 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\edb500.dll
[2010/11/21 14:31:18 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dayi.ime
[2010/11/21 14:31:18 | 000,042,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\davcdata.exe
[2010/11/21 14:31:16 | 000,057,399 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cplexe.exe
[2010/11/21 14:31:16 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\counters.dll
[2010/11/21 14:31:16 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cprofile.exe
[2010/11/21 14:31:15 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\convlog.exe
[2010/11/21 14:31:15 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\controt.dll
[2010/11/21 14:31:14 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\compfilt.dll
[2010/11/21 14:31:12 | 000,480,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintsetp.exe
[2010/11/21 14:31:12 | 000,198,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintime.dll
[2010/11/21 14:31:12 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintlgnt.ime
[2010/11/21 14:31:11 | 000,838,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtbrkr.dll
[2010/11/21 14:31:11 | 000,097,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtmbx.dll
[2010/11/21 14:31:11 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtskdic.dll
[2010/11/21 14:31:10 | 001,677,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chsbrkr.dll
[2010/11/21 14:31:10 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgport.exe
[2010/11/21 14:31:10 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgusr.exe
[2010/11/21 14:31:10 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chglogon.exe
[2010/11/21 14:31:10 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\change.exe
[2010/11/21 14:31:09 | 000,078,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chajei.ime
[2010/11/21 14:31:08 | 000,218,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_g18030.dll
[2010/11/21 14:31:08 | 000,054,528 | —- | C] (Philips Semiconductors GmbH) – C:\WINDOWS\System32\dllcache\cap7146.sys
[2010/11/21 14:31:08 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_iscii.dll
[2010/11/21 14:31:08 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_is2022.dll
[2010/11/21 14:31:01 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\browscap.dll
[2010/11/21 14:30:59 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\authfilt.dll
[2010/11/21 14:30:58 | 000,369,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\asp51.dll
[2010/11/21 14:30:58 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\asptxn.dll
[2010/11/21 14:30:58 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aspperf.dll
[2010/11/21 14:30:57 | 000,331,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aqueue.dll
[2010/11/21 14:30:57 | 000,108,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\appconf.dll
[2010/11/21 14:30:57 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_aqadmin.dll
[2010/11/21 14:30:57 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agt0804.dll
[2010/11/21 14:30:57 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agt0412.dll
[2010/11/21 14:30:57 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agt0411.dll
[2010/11/21 14:30:57 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agt040d.dll
[2010/11/21 14:30:56 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agt0404.dll
[2010/11/21 14:30:56 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agt0401.dll
[2010/11/21 14:30:55 | 000,049,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\adrot.dll
[2010/11/21 14:30:55 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_adsiisex.dll
[2010/11/21 14:30:54 | 000,029,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\admexs.dll
[2010/11/21 14:30:54 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\admxprox.dll
[2010/11/21 14:30:53 | 000,364,544 | —- | C] (Microsoft Corporation (written by Digital Renaissance Inc.)) – C:\WINDOWS\System32\dllcache\npdsplay.dll
[2010/11/21 14:30:53 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\npwmsdrm.dll
[2010/11/21 14:30:50 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wamregps.dll
[2010/11/21 14:30:49 | 000,032,827 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tcptest.exe
[2010/11/21 14:30:49 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tcptsat.dll
[2010/11/21 14:30:49 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\staxmem.dll
[2010/11/21 14:30:48 | 002,134,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smtpsnap.dll
[2010/11/21 14:30:48 | 000,189,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smtpadm.dll
[2010/11/21 14:30:48 | 000,020,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shtml.dll
[2010/11/21 14:30:48 | 000,016,437 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shtml.exe
[2010/11/21 14:30:43 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\logui.ocx
[2010/11/21 14:30:42 | 000,829,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetmgr.dll
[2010/11/21 14:30:42 | 000,169,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisui.dll
[2010/11/21 14:30:42 | 000,133,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisrtl.dll
[2010/11/21 14:30:42 | 000,068,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\isatq.dll
[2010/11/21 14:30:42 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetsloc.dll
[2010/11/21 14:30:42 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\infoadmn.dll
[2010/11/21 14:30:42 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetmgr.exe
[2010/11/21 14:30:41 | 000,068,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisext51.dll
[2010/11/21 14:30:41 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iismap.dll
[2010/11/21 14:30:41 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisrstas.exe
[2010/11/21 14:30:41 | 000,020,538 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fpremadm.exe
[2010/11/21 14:30:41 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisreset.exe
[2010/11/21 14:30:41 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftpsapi2.dll
[2010/11/21 14:30:41 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisrstap.dll
[2010/11/21 14:30:40 | 000,598,071 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fpmmc.dll
[2010/11/21 14:30:40 | 000,208,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fpmmcsat.dll
[2010/11/21 14:30:40 | 000,188,494 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fpcount.exe
[2010/11/21 14:30:40 | 000,109,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp98swin.exe
[2010/11/21 14:30:40 | 000,020,541 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fpexedll.dll
[2010/11/21 14:30:39 | 000,876,653 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp4awel.dll
[2010/11/21 14:30:39 | 000,147,513 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp4apws.dll
[2010/11/21 14:30:39 | 000,102,509 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp4atxt.dll
[2010/11/21 14:30:39 | 000,049,212 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp4awebs.dll
[2010/11/21 14:30:39 | 000,049,210 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp4areg.dll
[2010/11/21 14:30:39 | 000,041,020 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp4avnb.dll
[2010/11/21 14:30:39 | 000,032,826 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp4avss.dll
[2010/11/21 14:30:39 | 000,014,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp98sadm.exe
[2010/11/21 14:30:38 | 000,184,435 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp4amsft.dll
[2010/11/21 14:30:38 | 000,082,035 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fp4anscp.dll
[2010/11/21 14:30:37 | 000,275,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\certwiz.ocx
[2010/11/21 14:30:37 | 000,188,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cfgwiz.exe
[2010/11/21 14:30:37 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\certmap.ocx
[2010/11/21 14:30:37 | 000,076,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cnfgprts.ocx
[2010/11/21 14:30:37 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\coadmin.dll
[2010/11/21 14:30:37 | 000,016,439 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\author.exe
[2010/11/21 14:30:36 | 000,290,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\adsiis51.dll
[2010/11/21 14:30:36 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\admwprox.dll
[2010/11/21 14:30:36 | 000,020,540 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\author.dll
[2010/11/21 14:30:35 | 000,016,439 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\admin.exe
[2010/11/21 14:30:34 | 000,020,540 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\admin.dll
[2010/11/21 14:30:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\xircom
[2010/11/21 14:30:30 | 000,000,000 | —D | C] – C:\Program Files\xerox
[2010/11/21 14:30:29 | 000,000,000 | —D | C] – C:\Program Files\microsoft frontpage
[2010/11/21 14:30:10 | 000,000,000 | -H-D | C] – C:\WINDOWS\$hf_mig$
[2010/11/21 14:30:08 | 000,022,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpsp3res.dll
[2010/11/21 14:29:26 | 000,112,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mapi32.dll
[2010/11/21 14:27:59 | 000,000,000 | -HSD | C] – C:\Documents and Settings\All Users\DRM
[2010/11/21 14:27:44 | 000,000,000 | –SD | C] – C:\WINDOWS\Downloaded Program Files
[2010/11/21 14:27:44 | 000,000,000 | R–D | C] – C:\WINDOWS\Offline Web Pages
[2010/11/21 14:27:29 | 000,000,000 | -H-D | C] – C:\Program Files\WindowsUpdate
[2010/11/21 14:27:05 | 000,000,000 | —D | C] – C:\WINDOWS\System32\DirectX
[2010/11/21 14:26:46 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msoobe.exe
[2010/11/21 14:26:45 | 000,099,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\helphost.exe
[2010/11/21 14:26:45 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\notiflag.exe
[2010/11/21 14:26:45 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\brpinfo.dll
[2010/11/21 14:26:45 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\atrace.dll
[2010/11/21 14:26:45 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\atrace.dll
[2010/11/21 14:26:45 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hcappres.dll
[2010/11/21 14:26:38 | 000,047,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srdiag.exe
[2010/11/21 14:26:37 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nmevtmsg.dll
[2010/11/21 14:26:37 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nmevtmsg.dll
[2010/11/21 14:26:36 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\acctres.dll
[2010/11/21 14:26:36 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\acctres.dll
[2010/11/21 14:26:36 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msinfo32.exe
[2010/11/21 14:26:36 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wb32.exe
[2010/11/21 14:26:36 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cb32.exe
[2010/11/21 14:26:35 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Services
[2010/11/21 14:26:33 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwtutor.exe
[2010/11/21 14:26:33 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwres.dll
[2010/11/21 14:26:33 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\trialoc.dll
[2010/11/21 14:26:33 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wisc10.dll
[2010/11/21 14:26:33 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mssoapr.dll
[2010/11/21 14:26:33 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\isignup.exe
[2010/11/21 14:26:33 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icfgnt5.dll
[2010/11/21 14:26:33 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icfgnt5.dll
[2010/11/21 14:26:33 | 000,000,000 | –SD | C] – C:\WINDOWS\Tasks
[2010/11/21 14:26:32 | 000,235,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mssoap1.dll
[2010/11/21 14:26:32 | 000,093,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieinfo5.ocx
[2010/11/21 14:26:32 | 000,000,000 | —D | C] – C:\Program Files\Common Files\MSSoap
[2010/11/21 14:26:29 | 000,725,566 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srchui.dll
[2010/11/21 14:26:29 | 000,058,434 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srchctls.dll
[2010/11/21 14:26:28 | 003,166,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msgr3en.dll
[2010/11/21 14:26:28 | 000,759,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\VGX.dll
[2010/11/21 14:26:28 | 000,000,000 | —D | C] – C:\WINDOWS\srchasst
[2010/11/21 14:26:27 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Macromed
[2010/11/21 14:26:25 | 000,991,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\migrate.exe
[2010/11/21 14:26:25 | 000,819,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\setup_wm.exe
[2010/11/21 14:26:25 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpband.dll
[2010/11/21 14:26:24 | 000,356,352 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mpvis.dll
[2010/11/21 14:26:24 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmplayer.exe
[2010/11/21 14:26:23 | 000,183,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuaueng1.dll
[2010/11/21 14:26:23 | 000,183,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaueng1.dll
[2010/11/21 14:26:23 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuweb.dll
[2010/11/21 14:26:23 | 000,112,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wucltui.dll
[2010/11/21 14:26:23 | 000,112,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wucltui.dll
[2010/11/21 14:26:23 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuauserv.dll
[2010/11/21 14:26:22 | 001,134,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaueng.dll
[2010/11/21 14:26:22 | 000,430,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuapi.dll
[2010/11/21 14:26:22 | 000,430,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuapi.dll
[2010/11/21 14:26:22 | 000,382,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qmgr.dll
[2010/11/21 14:26:22 | 000,165,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuauclt1.exe
[2010/11/21 14:26:22 | 000,165,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuauclt1.exe
[2010/11/21 14:26:22 | 000,162,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaucpl.cpl
[2010/11/21 14:26:22 | 000,111,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuauclt.exe
[2010/11/21 14:26:22 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wups.dll
[2010/11/21 14:26:22 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wups.dll
[2010/11/21 14:26:22 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qmgrprxy.dll
[2010/11/21 14:26:22 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qmgrprxy.dll
[2010/11/21 14:26:22 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bitsprx2.dll
[2010/11/21 14:26:22 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx2.dll
[2010/11/21 14:26:22 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bitsprx3.dll
[2010/11/21 14:26:22 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx3.dll
[2010/11/21 14:26:20 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmm2res2.dll
[2010/11/21 14:26:19 | 004,256,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmm2res.dll
[2010/11/21 14:26:19 | 000,502,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmm2fxa.dll
[2010/11/21 14:26:19 | 000,402,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmm2filt.dll
[2010/11/21 14:26:19 | 000,325,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmm2fxb.dll
[2010/11/21 14:26:19 | 000,167,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmm2ae.dll
[2010/11/21 14:26:18 | 003,555,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\moviemk.exe
[2010/11/21 14:26:16 | 000,561,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msobmain.dll
[2010/11/21 14:26:16 | 000,122,368 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msobcomm.dll
[2010/11/21 14:26:16 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\oobebaln.exe
[2010/11/21 14:26:16 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msobshel.dll
[2010/11/21 14:26:16 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msobweb.dll
[2010/11/21 14:26:16 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msobdl.dll
[2010/11/21 14:26:14 | 000,150,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uploadm.exe
[2010/11/21 14:26:14 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrslv.dll
[2010/11/21 14:26:14 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\safrslv.dll
[2010/11/21 14:26:14 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrcdlg.dll
[2010/11/21 14:26:14 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\safrcdlg.dll
[2010/11/21 14:26:14 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\racpldlg.dll
[2010/11/21 14:26:14 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\racpldlg.dll
[2010/11/21 14:26:14 | 000,029,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrdm.dll
[2010/11/21 14:26:14 | 000,029,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\safrdm.dll
[2010/11/21 14:26:13 | 000,102,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pchshell.dll
[2010/11/21 14:26:13 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pchsvc.dll
[2010/11/21 14:26:11 | 000,158,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msconfig.exe
[2010/11/21 14:26:10 | 000,768,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\helpctr.exe
[2010/11/21 14:26:10 | 000,743,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\helpsvc.exe
[2010/11/21 14:26:10 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hscupd.exe
[2010/11/21 14:26:09 | 000,380,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rstrui.exe
[2010/11/21 14:26:09 | 000,239,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\srrstr.dll
[2010/11/21 14:26:09 | 000,239,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srrstr.dll
[2010/11/21 14:26:09 | 000,170,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srsvc.dll
[2010/11/21 14:26:09 | 000,124,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fltmgr.sys
[2010/11/21 14:26:09 | 000,073,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sr.sys
[2010/11/21 14:26:09 | 000,067,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srclient.dll
[2010/11/21 14:26:09 | 000,022,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fltMc.exe
[2010/11/21 14:26:09 | 000,022,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fltmc.exe
[2010/11/21 14:26:09 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fltlib.dll
[2010/11/21 14:26:09 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Restore
[2010/11/21 14:26:08 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ils.dll
[2010/11/21 14:26:08 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ils.dll
[2010/11/21 14:26:08 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msconf.dll
[2010/11/21 14:26:08 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msconf.dll
[2010/11/21 14:26:08 | 000,034,560 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mnmdd.dll
[2010/11/21 14:26:08 | 000,034,560 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mnmdd.dll
[2010/11/21 14:26:08 | 000,032,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mnmsrvc.exe
[2010/11/21 14:26:08 | 000,032,768 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\isrdbg32.dll
[2010/11/21 14:26:08 | 000,032,768 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\isrdbg32.dll
[2010/11/21 14:26:08 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nmmkcert.dll
[2010/11/21 14:26:08 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nmmkcert.dll
[2010/11/21 14:26:07 | 000,385,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\callcont.dll
[2010/11/21 14:26:07 | 000,229,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nmas.dll
[2010/11/21 14:26:07 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nac.dll
[2010/11/21 14:26:07 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rrcm.dll
[2010/11/21 14:26:07 | 000,057,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\h323cc.dll
[2010/11/21 14:26:07 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dcap32.dll
[2010/11/21 14:26:07 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nmasnt.dll
[2010/11/21 14:26:06 | 000,274,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mst120.dll
[2010/11/21 14:26:06 | 000,188,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nmwb.dll
[2010/11/21 14:26:06 | 000,172,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nmoldwb.dll
[2010/11/21 14:26:06 | 000,151,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nmft.dll
[2010/11/21 14:26:06 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nmchat.dll
[2010/11/21 14:26:06 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nmcom.dll
[2010/11/21 14:26:06 | 000,057,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mst123.dll
[2010/11/21 14:26:06 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\confmrsl.dll
[2010/11/21 14:26:05 | 001,032,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\conf.exe
[2010/11/21 14:26:05 | 000,252,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msoeacct.dll
[2010/11/21 14:26:05 | 000,252,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msoeacct.dll
[2010/11/21 14:26:05 | 000,105,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msoert2.dll
[2010/11/21 14:26:05 | 000,105,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msoert2.dll
[2010/11/21 14:26:05 | 000,084,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wabimp.dll
[2010/11/21 14:26:05 | 000,046,080 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wab.exe
[2010/11/21 14:26:05 | 000,032,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wabfind.dll
[2010/11/21 14:26:05 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wabmig.exe
[2010/11/21 14:26:05 | 000,000,000 | —D | C] – C:\Program Files\NetMeeting
[2010/11/21 14:26:04 | 000,678,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetcomm.dll
[2010/11/21 14:26:04 | 000,504,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wab32.dll
[2010/11/21 14:26:04 | 000,249,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wab32res.dll
[2010/11/21 14:26:04 | 000,081,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\directdb.dll
[2010/11/21 14:26:04 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetres.dll
[2010/11/21 14:26:04 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetres.dll
[2010/11/21 14:26:03 | 000,104,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\oeimport.dll
[2010/11/21 14:26:03 | 000,060,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msimn.exe
[2010/11/21 14:26:02 | 002,479,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msoeres.dll
[2010/11/21 14:26:02 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\setup50.exe
[2010/11/21 14:26:02 | 000,060,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\oemig50.exe
[2010/11/21 14:26:02 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\oemiglib.dll
[2010/11/21 14:26:02 | 000,000,000 | —D | C] – C:\Program Files\Outlook Express
[2010/11/21 14:26:01 | 000,274,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstask.dll
[2010/11/21 14:26:01 | 000,274,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetcfg.dll
[2010/11/21 14:26:01 | 000,274,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetcfg.dll
[2010/11/21 14:26:01 | 000,190,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\schedsvc.dll
[2010/11/21 14:26:01 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\isign32.dll
[2010/11/21 14:26:01 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\isign32.dll
[2010/11/21 14:26:01 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icwdial.dll
[2010/11/21 14:26:01 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwdial.dll
[2010/11/21 14:26:01 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icwphbk.dll
[2010/11/21 14:26:01 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwphbk.dll
[2010/11/21 14:26:01 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mstinit.exe
[2010/11/21 14:26:01 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstinit.exe
[2010/11/21 14:26:00 | 000,172,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwhelp.dll
[2010/11/21 14:26:00 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwconn.dll
[2010/11/21 14:26:00 | 000,049,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwutil.dll
[2010/11/21 14:26:00 | 000,032,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwdl.dll
[2010/11/21 14:26:00 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwrmind.exe
[2010/11/21 14:26:00 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetwiz.exe
[2010/11/21 14:25:59 | 000,561,179 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dao360.dll
[2010/11/21 14:25:59 | 000,217,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sqlxmlx.dll
[2010/11/21 14:25:59 | 000,214,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwconn1.exe
[2010/11/21 14:25:59 | 000,086,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwconn2.exe
[2010/11/21 14:25:59 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\oledb32r.dll
[2010/11/21 14:25:58 | 000,487,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\oledb32.dll
[2010/11/21 14:25:58 | 000,315,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdasql.dll
[2010/11/21 14:25:58 | 000,233,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdaora.dll
[2010/11/21 14:25:58 | 000,204,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdaps.dll
[2010/11/21 14:25:58 | 000,094,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdatl3.dll
[2010/11/21 14:25:58 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdaosp.dll
[2010/11/21 14:25:58 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxactps.dll
[2010/11/21 14:25:58 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdatt.dll
[2010/11/21 14:25:58 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdasqlr.dll
[2010/11/21 14:25:58 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdaorar.dll
[2010/11/21 14:25:58 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdaurl.dll
[2010/11/21 14:25:58 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdasc.dll
[2010/11/21 14:25:58 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdaer.dll
[2010/11/21 14:25:58 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdaenum.dll
[2010/11/21 14:25:58 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdadc.dll
[2010/11/21 14:25:57 | 000,536,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msado15.dll
[2010/11/21 14:25:57 | 000,200,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msadox.dll
[2010/11/21 14:25:57 | 000,180,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msadomd.dll
[2010/11/21 14:25:57 | 000,118,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdarem.dll
[2010/11/21 14:25:57 | 000,102,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msjro.dll
[2010/11/21 14:25:57 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msado27.tlb
[2010/11/21 14:25:57 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msado26.tlb
[2010/11/21 14:25:57 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msado25.tlb
[2010/11/21 14:25:57 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msado21.tlb
[2010/11/21 14:25:57 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msado20.tlb
[2010/11/21 14:25:57 | 000,057,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msadrh15.dll
[2010/11/21 14:25:57 | 000,057,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msador15.dll
[2010/11/21 14:25:57 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msader15.dll
[2010/11/21 14:25:57 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdaremr.dll
[2010/11/21 14:25:56 | 000,331,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msadce.dll
[2010/11/21 14:25:56 | 000,200,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdaprst.dll
[2010/11/21 14:25:56 | 000,155,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msadds.dll
[2010/11/21 14:25:56 | 000,143,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msadco.dll
[2010/11/21 14:25:56 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msadcf.dll
[2010/11/21 14:25:56 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msadcs.dll
[2010/11/21 14:25:56 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdfmap.dll
[2010/11/21 14:25:56 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msaddsr.dll
[2010/11/21 14:25:56 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msadcer.dll
[2010/11/21 14:25:56 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdaprsr.dll
[2010/11/21 14:25:56 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msadcor.dll
[2010/11/21 14:25:56 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msadcfr.dll
[2010/11/21 14:25:56 | 000,000,000 | —D | C] – C:\Program Files\Common Files\System
[2010/11/21 14:25:55 | 000,638,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iexplore.exe
[2010/11/21 14:25:55 | 000,068,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hmmapi.dll
[2010/11/21 14:25:55 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedw.exe
[2010/11/21 14:25:55 | 000,000,000 | —D | C] – C:\Program Files\Internet Explorer
[2010/11/21 14:25:11 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Music
[2010/11/21 14:24:29 | 000,000,000 | R-SD | C] – C:\WINDOWS\assembly
[2010/11/21 14:23:51 | 000,000,000 | —D | C] – C:\Program Files\ComPlus Applications
[2010/11/21 14:23:41 | 000,000,000 | —D | C] – C:\WINDOWS\Registration
[2010/11/21 14:23:31 | 000,000,000 | —D | C] – C:\Program Files\Online Services
[2010/11/21 14:23:08 | 000,000,000 | —D | C] – C:\WINDOWS\Microsoft.NET
[2010/11/21 14:23:03 | 000,000,000 | —D | C] – C:\Program Files\Windows Media Player
[2010/11/21 14:22:39 | 000,000,000 | —D | C] – C:\Program Files\Windows Plus
[2010/11/21 14:22:38 | 001,742,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mypixdx.scr
[2010/11/21 14:22:36 | 007,093,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\space.scr
[2010/11/21 14:22:34 | 004,396,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wpgldfsh.scr
[2010/11/21 14:22:33 | 003,343,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nature.scr
[2010/11/21 14:22:31 | 005,068,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\davinci.scr
[2010/11/21 14:22:25 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\igdetect.dll
[2010/11/21 14:22:22 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmm2ext.dll
[2010/11/21 14:22:22 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmm2eres.dll
[2010/11/21 14:22:22 | 000,000,000 | —D | C] – C:\Program Files\Movie Maker
[2010/11/21 14:21:24 | 000,462,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehsqqp20.dll
[2010/11/21 14:21:24 | 000,151,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehsqdb20.dll
[2010/11/21 14:21:24 | 000,117,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bdatunepia.dll
[2010/11/21 14:21:24 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehsqse20.dll
[2010/11/21 14:21:23 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\medctrro.exe
[2010/11/21 14:21:23 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehmsas.exe
[2010/11/21 14:21:22 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Pictures
[2010/11/21 14:21:14 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehiuserxp.dll
[2010/11/21 14:21:13 | 003,219,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehshell.exe
[2010/11/21 14:21:13 | 001,370,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehchsime.dll
[2010/11/21 14:21:13 | 000,192,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehcommon.dll
[2010/11/21 14:21:13 | 000,102,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehSched.exe
[2010/11/21 14:21:13 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehRec.exe
[2010/11/21 14:21:13 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehtray.exe
[2010/11/21 14:21:13 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehjpnime.dll
[2010/11/21 14:21:13 | 000,039,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehentt.dll
[2010/11/21 14:21:12 | 001,863,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EhCM.dll
[2010/11/21 14:21:12 | 000,492,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehui.dll
[2010/11/21 14:21:12 | 000,129,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehdrop.dll
[2010/11/21 14:21:12 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehdebug.dll
[2010/11/21 14:21:08 | 008,843,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehres.dll
[2010/11/21 14:21:07 | 001,349,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehuihlp.dll
[2010/11/21 14:21:07 | 000,864,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehepg.dll
[2010/11/21 14:21:07 | 000,389,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehiProxy.dll
[2010/11/21 14:21:07 | 000,278,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehiVidCtl.dll
[2010/11/21 14:21:07 | 000,269,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehglid.dll
[2010/11/21 14:21:07 | 000,204,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehiPlay.dll
[2010/11/21 14:21:07 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\debugsvc.dll
[2010/11/21 14:21:07 | 000,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehepgdat.dll
[2010/11/21 14:21:07 | 000,102,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehCIR.dll
[2010/11/21 14:21:07 | 000,097,280 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehProxy.dll
[2010/11/21 14:21:07 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehepgdec.dll
[2010/11/21 14:21:07 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehepgnet.dll
[2010/11/21 14:21:06 | 000,389,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehRecObj.dll
[2010/11/21 14:21:06 | 000,307,712 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehPlayer.dll
[2010/11/21 14:21:06 | 000,122,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehiwmp.dll
[2010/11/21 14:21:06 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ehiExtens.dll
[2010/11/21 14:20:03 | 000,000,000 | —D | C] – C:\Program Files\Messenger
[2010/11/21 14:20:02 | 001,817,687 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckgres.dll
[2010/11/21 14:20:02 | 000,082,501 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckg.dll
[2010/11/21 14:20:02 | 000,042,577 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckgzm.exe
[2010/11/21 14:20:01 | 002,178,131 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvlres.dll
[2010/11/21 14:20:01 | 000,780,885 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkrres.dll
[2010/11/21 14:20:01 | 000,753,236 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvseres.dll
[2010/11/21 14:20:01 | 000,066,113 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvl.dll
[2010/11/21 14:20:01 | 000,048,706 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvse.dll
[2010/11/21 14:20:01 | 000,042,575 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkrzm.exe
[2010/11/21 14:20:01 | 000,042,574 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvsezm.exe
[2010/11/21 14:20:01 | 000,042,573 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvlzm.exe
[2010/11/21 14:20:01 | 000,042,573 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtzzm.exe
[2010/11/21 14:20:01 | 000,040,515 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkr.dll
[2010/11/21 14:20:00 | 001,175,635 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtzres.dll
[2010/11/21 14:20:00 | 001,039,955 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmnresm.dll
[2010/11/21 14:20:00 | 000,113,222 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zoneclim.dll
[2010/11/21 14:20:00 | 000,057,409 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtz.dll
[2010/11/21 14:20:00 | 000,041,029 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zcorem.dll
[2010/11/21 14:20:00 | 000,032,339 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uniansi.dll
[2010/11/21 14:20:00 | 000,013,894 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zonelibm.dll
[2010/11/21 14:20:00 | 000,004,677 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zeeverm.dll
[2010/11/21 14:19:59 | 000,217,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmnclim.dll
[2010/11/21 14:19:59 | 000,036,937 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zclientm.exe
[2010/11/21 14:19:59 | 000,029,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\znetm.dll
[2010/11/21 14:19:59 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\write.exe
[2010/11/21 14:19:59 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\write.exe
[2010/11/21 14:19:59 | 000,000,000 | —D | C] – C:\Program Files\MSN Gaming Zone
[2010/11/21 14:19:51 | 000,227,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avtapi.dll
[2010/11/21 14:19:51 | 000,227,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avtapi.dll
[2010/11/21 14:19:51 | 000,138,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sndvol32.exe
[2010/11/21 14:19:51 | 000,138,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sndvol32.exe
[2010/11/21 14:19:51 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avwav.dll
[2010/11/21 14:19:51 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avwav.dll
[2010/11/21 14:19:51 | 000,044,544 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\hticons.dll
[2010/11/21 14:19:51 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avmeter.dll
[2010/11/21 14:19:51 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avmeter.dll
[2010/11/21 14:19:51 | 000,013,312 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\dllcache\htrn_jis.dll
[2010/11/21 14:19:50 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\winchat.exe
[2010/11/21 14:19:50 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winchat.exe
[2010/11/21 14:19:45 | 000,605,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\getuname.dll
[2010/11/21 14:19:45 | 000,605,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\getuname.dll
[2010/11/21 14:19:44 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\winmine.exe
[2010/11/21 14:19:44 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmine.exe
[2010/11/21 14:19:44 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\calc.exe
[2010/11/21 14:19:44 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\calc.exe
[2010/11/21 14:19:44 | 000,080,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\charmap.exe
[2010/11/21 14:19:44 | 000,080,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\charmap.exe
[2010/11/21 14:19:44 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sol.exe
[2010/11/21 14:19:44 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sol.exe
[2010/11/21 14:19:43 | 000,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mshearts.exe
[2010/11/21 14:19:43 | 000,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshearts.exe
[2010/11/21 14:19:43 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\freecell.exe
[2010/11/21 14:19:43 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\freecell.exe
[2010/11/21 14:19:43 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\regini.exe
[2010/11/21 14:19:43 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\regini.exe
[2010/11/21 14:19:43 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsshutdn.exe
[2010/11/21 14:19:43 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsshutdn.exe
[2010/11/21 14:19:43 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tskill.exe
[2010/11/21 14:19:43 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tskill.exe
[2010/11/21 14:19:43 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rwinsta.exe
[2010/11/21 14:19:43 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rwinsta.exe
[2010/11/21 14:19:43 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsdiscon.exe
[2010/11/21 14:19:43 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsdiscon.exe
[2010/11/21 14:19:43 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscon.exe
[2010/11/21 14:19:43 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tscon.exe
[2010/11/21 14:19:43 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\shadow.exe
[2010/11/21 14:19:43 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shadow.exe
[2010/11/21 14:19:43 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\reset.exe
[2010/11/21 14:19:43 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\reset.exe
[2010/11/21 14:19:42 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qwinsta.exe
[2010/11/21 14:19:42 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qwinsta.exe
[2010/11/21 14:19:42 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msg.exe
[2010/11/21 14:19:42 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msg.exe
[2010/11/21 14:19:42 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mtsadmin.tlb
[2010/11/21 14:19:42 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qappsrv.exe
[2010/11/21 14:19:42 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qappsrv.exe
[2010/11/21 14:19:42 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cdmodem.dll
[2010/11/21 14:19:42 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cdmodem.dll
[2010/11/21 14:19:42 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\logoff.exe
[2010/11/21 14:19:42 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\logoff.exe
[2010/11/21 14:19:42 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpcfgex.dll
[2010/11/21 14:19:42 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rdpcfgex.dll
[2010/11/21 14:19:41 | 000,147,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\comsnap.dll
[2010/11/21 14:19:41 | 000,147,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsnap.dll
[2010/11/21 14:19:41 | 000,082,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\comrepl.dll
[2010/11/21 14:19:41 | 000,082,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comrepl.dll
[2010/11/21 14:19:41 | 000,054,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\stclient.dll
[2010/11/21 14:19:41 | 000,054,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\stclient.dll
[2010/11/21 14:19:41 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\comaddin.dll
[2010/11/21 14:19:41 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comaddin.dll
[2010/11/21 14:19:41 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxlegih.dll
[2010/11/21 14:19:41 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mtxlegih.dll
[2010/11/21 14:19:41 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxdm.dll
[2010/11/21 14:19:41 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mtxdm.dll
[2010/11/21 14:19:41 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dcomcnfg.exe
[2010/11/21 14:19:41 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dcomcnfg.exe
[2010/11/21 14:19:41 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\comrereg.exe
[2010/11/21 14:19:41 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxex.dll
[2010/11/21 14:19:41 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mtxex.dll
[2010/11/21 14:19:40 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmi2xml.dll
[2010/11/21 14:19:38 | 000,075,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmipicmp.dll
[2010/11/21 14:19:38 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmimsg.dll
[2010/11/21 14:19:38 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmitimep.dll
[2010/11/21 14:19:37 | 000,273,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msiprov.dll
[2010/11/21 14:19:37 | 000,116,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\updprov.dll
[2010/11/21 14:19:37 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tmplprov.dll
[2010/11/21 14:19:37 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemdisp.tlb
[2010/11/21 14:19:37 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\trnsprov.dll
[2010/11/21 14:19:37 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smtpcons.dll
[2010/11/21 14:19:37 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemads.tlb
[2010/11/21 14:19:37 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unsecapp.exe
[2010/11/21 14:19:37 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmgmtr.dll
[2010/11/21 14:19:37 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmgmt.exe
[2010/11/21 14:19:37 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemads.dll
[2010/11/21 14:19:36 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dsprov.dll
[2010/11/21 14:19:36 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fwdprov.dll
[2010/11/21 14:19:22 | 000,000,000 | —D | C] – C:\Program Files\MSN
[2010/11/21 14:19:21 | 000,281,088 | —- | C] (Cinematronics) – C:\WINDOWS\System32\dllcache\pinball.exe
[2010/11/21 14:19:21 | 000,183,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\accwiz.exe
[2010/11/21 14:19:21 | 000,183,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\accwiz.exe
[2010/11/21 14:19:21 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sndrec32.exe
[2010/11/21 14:19:21 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sndrec32.exe
[2010/11/21 14:19:21 | 000,068,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\access.cpl
[2010/11/21 14:19:21 | 000,068,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\access.cpl
[2010/11/21 14:19:20 | 000,539,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dialer.exe
[2010/11/21 14:19:20 | 000,345,088 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\hypertrm.dll
[2010/11/21 14:19:20 | 000,343,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mspaint.exe
[2010/11/21 14:19:20 | 000,343,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mspaint.exe
[2010/11/21 14:19:20 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mplay32.exe
[2010/11/21 14:19:20 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mplay32.exe
[2010/11/21 14:19:20 | 000,102,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\clipbrd.exe
[2010/11/21 14:19:20 | 000,102,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clipbrd.exe
[2010/11/21 14:19:20 | 000,000,000 | —D | C] – C:\Program Files\Windows NT
[2010/11/21 14:19:19 | 000,538,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spider.exe
[2010/11/21 14:19:19 | 000,538,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spider.exe
[2010/11/21 14:19:19 | 000,139,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rdpwd.sys
[2010/11/21 14:19:19 | 000,093,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscfgwmi.dll
[2010/11/21 14:19:19 | 000,093,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tscfgwmi.dll
[2010/11/21 14:19:19 | 000,021,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdtcp.sys
[2010/11/21 14:19:19 | 000,012,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdpipe.sys
[2010/11/21 14:19:18 | 000,655,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstscax.dll
[2010/11/21 14:19:18 | 000,407,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstsc.exe
[2010/11/21 14:19:18 | 000,147,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdchost.dll
[2010/11/21 14:19:18 | 000,147,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rdchost.dll
[2010/11/21 14:19:18 | 000,140,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sessmgr.exe
[2010/11/21 14:19:18 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdshost.exe
[2010/11/21 14:19:18 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rdshost.exe
[2010/11/21 14:19:18 | 000,060,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\remotepg.dll
[2010/11/21 14:19:18 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscupgrd.exe
[2010/11/21 14:19:18 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tscupgrd.exe
[2010/11/21 14:19:18 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdsaddin.exe
[2010/11/21 14:19:18 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rdsaddin.exe
[2010/11/21 14:19:17 | 000,295,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\termsrv.dll
[2010/11/21 14:19:17 | 000,161,280 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtcuiu.dll
[2010/11/21 14:19:17 | 000,161,280 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdtcuiu.dll
[2010/11/21 14:19:17 | 000,090,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxoci.dll
[2010/11/21 14:19:17 | 000,090,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mtxoci.dll
[2010/11/21 14:19:17 | 000,087,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpwsx.dll
[2010/11/21 14:19:17 | 000,087,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rdpwsx.dll
[2010/11/21 14:19:17 | 000,062,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpclip.exe
[2010/11/21 14:19:17 | 000,062,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rdpclip.exe
[2010/11/21 14:19:17 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cfgbkend.dll
[2010/11/21 14:19:17 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cfgbkend.dll
[2010/11/21 14:19:17 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qprocess.exe
[2010/11/21 14:19:17 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qprocess.exe
[2010/11/21 14:19:17 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpsnd.dll
[2010/11/21 14:19:17 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rdpsnd.dll
[2010/11/21 14:19:17 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icaapi.dll
[2010/11/21 14:19:17 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icaapi.dll
[2010/11/21 14:19:17 | 000,000,000 | —D | C] – C:\WINDOWS\System32\MsDtc
[2010/11/21 14:19:16 | 000,949,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtctm.dll
[2010/11/21 14:19:16 | 000,949,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdtctm.dll
[2010/11/21 14:19:16 | 000,425,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtcprx.dll
[2010/11/21 14:19:16 | 000,425,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdtcprx.dll
[2010/11/21 14:19:16 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtclog.dll
[2010/11/21 14:19:16 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdtclog.dll
[2010/11/21 14:19:16 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xolehlp.dll
[2010/11/21 14:19:16 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\xolehlp.dll
[2010/11/21 14:19:16 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdtc.exe
[2010/11/21 14:19:15 | 000,195,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\comadmin.dll
[2010/11/21 14:19:15 | 000,110,080 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\clbcatex.dll
[2010/11/21 14:19:15 | 000,110,080 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clbcatex.dll
[2010/11/21 14:19:15 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\catsrvps.dll
[2010/11/21 14:19:15 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrvps.dll
[2010/11/21 14:19:15 | 000,062,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\colbact.dll
[2010/11/21 14:19:15 | 000,062,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\colbact.dll
[2010/11/21 14:19:15 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\comrepl.exe
[2010/11/21 14:19:15 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Com
[2010/11/21 14:19:14 | 001,251,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\comsvcs.dll
[2010/11/21 14:19:14 | 001,251,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsvcs.dll
[2010/11/21 14:19:14 | 000,628,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\catsrvut.dll
[2010/11/21 14:19:14 | 000,628,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrvut.dll
[2010/11/21 14:19:14 | 000,540,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\comuid.dll
[2010/11/21 14:19:14 | 000,540,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comuid.dll
[2010/11/21 14:19:14 | 000,229,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\catsrv.dll
[2010/11/21 14:19:14 | 000,229,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrv.dll
[2010/11/21 14:19:13 | 000,501,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\clbcatq.dll
[2010/11/21 14:19:12 | 000,144,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmisvc.dll
[2010/11/21 14:19:12 | 000,095,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmiutils.dll
[2010/11/21 14:19:12 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmipsess.dll
[2010/11/21 14:19:11 | 000,358,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmic.exe
[2010/11/21 14:19:11 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemupgd.dll
[2010/11/21 14:19:11 | 000,196,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmiadap.exe
[2010/11/21 14:19:11 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmipcima.dll
[2010/11/21 14:19:11 | 000,144,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmiprov.dll
[2010/11/21 14:19:11 | 000,140,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmidcprv.dll
[2010/11/21 14:19:11 | 000,132,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmipdskq.dll
[2010/11/21 14:19:11 | 000,126,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmiapsrv.exe
[2010/11/21 14:19:11 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmiaprpl.dll
[2010/11/21 14:19:11 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmipjobj.dll
[2010/11/21 14:19:11 | 000,062,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmipiprt.dll
[2010/11/21 14:19:11 | 000,060,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmicookr.dll
[2010/11/21 14:19:11 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmiapres.dll
[2010/11/21 14:19:10 | 000,530,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemcore.dll
[2010/11/21 14:19:10 | 000,273,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemess.dll
[2010/11/21 14:19:10 | 000,214,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemcomn.dll
[2010/11/21 14:19:10 | 000,196,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemcntl.dll
[2010/11/21 14:19:10 | 000,178,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemdisp.dll
[2010/11/21 14:19:10 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\viewprov.dll
[2010/11/21 14:19:10 | 000,116,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemtest.exe
[2010/11/21 14:19:10 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemcons.dll
[2010/11/21 14:19:10 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemsvc.dll
[2010/11/21 14:19:10 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemprox.dll
[2010/11/21 14:19:09 | 000,237,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\provthrd.dll
[2010/11/21 14:19:09 | 000,212,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntevt.dll
[2010/11/21 14:19:09 | 000,177,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\repdrvfs.dll
[2010/11/21 14:19:09 | 000,123,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mofd.dll
[2010/11/21 14:19:09 | 000,092,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\policman.dll
[2010/11/21 14:19:09 | 000,086,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\stdprov.dll
[2010/11/21 14:19:09 | 000,047,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ncprov.dll
[2010/11/21 14:19:09 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\scrcons.exe
[2010/11/21 14:19:09 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mofcomp.exe
[2010/11/21 14:19:08 | 000,247,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\esscli.dll
[2010/11/21 14:19:08 | 000,185,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\framedyn.dll
[2010/11/21 14:19:08 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\krnlprov.dll
[2010/11/21 14:19:07 | 001,352,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cimwin32.dll
[2010/11/21 14:19:07 | 000,185,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmprops.dll
[2010/11/21 14:19:07 | 000,185,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cmprops.dll
[2010/11/21 14:19:07 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\licwmi.dll
[2010/11/21 14:19:07 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\licwmi.dll
[2010/11/21 14:19:07 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\servdeps.dll
[2010/11/21 14:19:07 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\servdeps.dll
[2010/11/21 14:19:07 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmfutil.dll
[2010/11/21 14:19:07 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mmfutil.dll
[2010/11/21 14:18:59 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents\My Videos
[2010/11/21 14:13:54 | 000,152,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\irftp.exe
[2010/11/21 14:13:53 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wshirda.dll
[2010/11/21 14:13:51 | 000,028,672 | —- | C] (National Semiconductor Corporation) – C:\WINDOWS\System32\drivers\nscirda.sys
[2010/11/21 14:13:30 | 000,006,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\enum1394.sys
[2010/11/21 14:13:04 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\usbui.dll
[2010/11/21 14:13:04 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbui.dll
[2010/11/21 14:12:47 | 000,014,080 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\battc.sys
[2010/11/21 14:11:44 | 000,000,000 | -HSD | C] – C:\WINDOWS\Installer
[2010/11/21 14:11:43 | 000,000,000 | —D | C] – C:\Program Files\Common Files\ODBC
[2010/11/21 14:11:41 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spcommon.dll
[2010/11/21 14:11:41 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spcplui.dll
[2010/11/21 14:11:40 | 000,774,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spttseng.dll
[2010/11/21 14:11:39 | 000,155,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sapi.cpl
[2010/11/21 14:11:39 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sapisvr.exe
[2010/11/21 14:11:39 | 000,000,000 | —D | C] – C:\Program Files\Common Files\SpeechEngines
[2010/11/21 14:11:38 | 000,741,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sapi.dll
[2010/11/21 14:11:38 | 000,000,000 | R–D | C] – C:\Program Files
[2010/11/21 14:11:38 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Microsoft Shared
[2010/11/21 14:11:38 | 000,000,000 | —D | C] – C:\Program Files\Common Files
[2010/11/21 14:11:37 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agt041f.dll
[2010/11/21 14:11:35 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agt0419.dll
[2010/11/21 14:11:35 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtuq.dll
[2010/11/21 14:11:35 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtuf.dll
[2010/11/21 14:11:35 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtuq.dll
[2010/11/21 14:11:35 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtuf.dll
[2010/11/21 14:11:35 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdazel.dll
[2010/11/21 14:11:35 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdazel.dll
[2010/11/21 14:11:34 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdycc.dll
[2010/11/21 14:11:34 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbduzb.dll
[2010/11/21 14:11:34 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdur.dll
[2010/11/21 14:11:34 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtat.dll
[2010/11/21 14:11:34 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdru1.dll
[2010/11/21 14:11:34 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdru.dll
[2010/11/21 14:11:34 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdmon.dll
[2010/11/21 14:11:34 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdkyr.dll
[2010/11/21 14:11:34 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdkaz.dll
[2010/11/21 14:11:34 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdbu.dll
[2010/11/21 14:11:34 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdblr.dll
[2010/11/21 14:11:34 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdaze.dll
[2010/11/21 14:11:34 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdycc.dll
[2010/11/21 14:11:34 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbduzb.dll
[2010/11/21 14:11:34 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdur.dll
[2010/11/21 14:11:34 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtat.dll
[2010/11/21 14:11:34 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdru1.dll
[2010/11/21 14:11:34 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdru.dll
[2010/11/21 14:11:34 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdmon.dll
[2010/11/21 14:11:34 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkyr.dll
[2010/11/21 14:11:34 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkaz.dll
[2010/11/21 14:11:34 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdbu.dll
[2010/11/21 14:11:34 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdblr.dll
[2010/11/21 14:11:34 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdaze.dll
[2010/11/21 14:11:33 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agt0408.dll
[2010/11/21 14:11:32 | 000,008,192 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhept.dll
[2010/11/21 14:11:32 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhept.dll
[2010/11/21 14:11:32 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhela3.dll
[2010/11/21 14:11:32 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhela3.dll
[2010/11/21 14:11:32 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhela2.dll
[2010/11/21 14:11:32 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdgkl.dll
[2010/11/21 14:11:32 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhela2.dll
[2010/11/21 14:11:32 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdgkl.dll
[2010/11/21 14:11:32 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe319.dll
[2010/11/21 14:11:32 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe220.dll
[2010/11/21 14:11:32 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe.dll
[2010/11/21 14:11:32 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe319.dll
[2010/11/21 14:11:32 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe220.dll
[2010/11/21 14:11:32 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe.dll
[2010/11/21 14:11:31 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlv1.dll
[2010/11/21 14:11:31 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlv.dll
[2010/11/21 14:11:31 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdest.dll
[2010/11/21 14:11:31 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlv1.dll
[2010/11/21 14:11:31 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlv.dll
[2010/11/21 14:11:31 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdest.dll
[2010/11/21 14:11:31 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlt1.dll
[2010/11/21 14:11:31 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlt.dll
[2010/11/21 14:11:31 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlt1.dll
[2010/11/21 14:11:31 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlt.dll
[2010/11/21 14:11:30 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agt040e.dll
[2010/11/21 14:11:30 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agt0415.dll
[2010/11/21 14:11:30 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agt0405.dll
[2010/11/21 14:11:29 | 000,007,168 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz.dll
[2010/11/21 14:11:29 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz.dll
[2010/11/21 14:11:29 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdycl.dll
[2010/11/21 14:11:29 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsl1.dll
[2010/11/21 14:11:29 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsl.dll
[2010/11/21 14:11:29 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpl.dll
[2010/11/21 14:11:29 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhu.dll
[2010/11/21 14:11:29 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz2.dll
[2010/11/21 14:11:29 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz1.dll
[2010/11/21 14:11:29 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcr.dll
[2010/11/21 14:11:29 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\KBDAL.DLL
[2010/11/21 14:11:29 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdycl.dll
[2010/11/21 14:11:29 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsl1.dll
[2010/11/21 14:11:29 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsl.dll
[2010/11/21 14:11:29 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdpl.dll
[2010/11/21 14:11:29 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhu.dll
[2010/11/21 14:11:29 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz2.dll
[2010/11/21 14:11:29 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz1.dll
[2010/11/21 14:11:29 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcr.dll
[2010/11/21 14:11:29 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdal.dll
[2010/11/21 14:11:29 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdro.dll
[2010/11/21 14:11:29 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpl1.dll
[2010/11/21 14:11:29 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhu1.dll
[2010/11/21 14:11:29 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdro.dll
[2010/11/21 14:11:29 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdpl1.dll
[2010/11/21 14:11:29 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhu1.dll
[2010/11/21 14:11:27 | 000,176,157 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dllcache\dgrpsetu.dll
[2010/11/21 14:11:27 | 000,176,157 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dgrpsetu.dll
[2010/11/21 14:11:27 | 000,085,020 | —- | C] (Digi International) – C:\WINDOWS\System32\dllcache\dgsetup.dll
[2010/11/21 14:11:27 | 000,085,020 | —- | C] (Digi International) – C:\WINDOWS\System32\dgsetup.dll
[2010/11/21 14:11:27 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\irclass.dll
[2010/11/21 14:11:27 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irclass.dll
[2010/11/21 14:11:26 | 000,103,424 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\EqnClass.Dll
[2010/11/21 14:11:26 | 000,103,424 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqnclass.dll
[2010/11/21 14:11:26 | 000,082,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLECLI.DLL
[2010/11/21 14:11:26 | 000,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\spxcoins.dll
[2010/11/21 14:11:26 | 000,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spxcoins.dll
[2010/11/21 14:11:26 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLESVR.DLL
[2010/11/21 14:11:26 | 000,019,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TAPI.DLL
[2010/11/21 14:11:26 | 000,013,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\WFWNET.DRV
[2010/11/21 14:11:26 | 000,009,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\VER.DLL
[2010/11/21 14:11:26 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SHELL.DLL
[2010/11/21 14:11:26 | 000,004,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TIMER.DRV
[2010/11/21 14:11:26 | 000,003,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SYSTEM.DRV
[2010/11/21 14:11:26 | 000,002,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\VGA.DRV
[2010/11/21 14:11:26 | 000,001,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SOUND.DRV
[2010/11/21 14:11:25 | 000,126,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MSVIDEO.DLL
[2010/11/21 14:11:25 | 000,109,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\AVIFILE.DLL
[2010/11/21 14:11:25 | 000,073,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCIAVI.DRV
[2010/11/21 14:11:25 | 000,069,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\AVICAP.DLL
[2010/11/21 14:11:25 | 000,032,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\COMMDLG.DLL
[2010/11/21 14:11:25 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCIWAVE.DRV
[2010/11/21 14:11:25 | 000,025,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCISEQ.DRV
[2010/11/21 14:11:25 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\TASKMAN.EXE
[2010/11/21 14:11:25 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\taskman.exe
[2010/11/21 14:11:25 | 000,009,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\LZEXPAND.DLL
[2010/11/21 14:11:25 | 000,002,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MOUSE.DRV
[2010/11/21 14:11:25 | 000,002,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\KEYBOARD.DRV
[2010/11/21 14:11:25 | 000,001,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MMTASK.TSK
[2010/11/21 14:11:24 | 000,146,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\WINSPOOL.DRV
[2010/11/21 14:11:24 | 000,068,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MMSYSTEM.DLL
[2010/11/21 14:11:24 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irenum.sys
[2010/11/21 14:11:24 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\batt.dll
[2010/11/21 14:11:24 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\batt.dll
[2010/11/21 14:11:23 | 000,074,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\storprop.dll
[2010/11/21 14:11:12 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Start Menu
[2010/11/21 14:11:12 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documents
[2010/11/21 14:11:12 | 000,000,000 | -H-D | C] – C:\Documents and Settings\All Users\Templates
[2010/11/21 14:11:12 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Favorites
[2010/11/21 14:11:12 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Desktop
[2010/11/21 14:10:57 | 000,000,000 | —D | C] – C:\WINDOWS\System32\CatRoot2
[2010/11/21 14:10:57 | 000,000,000 | —D | C] – C:\WINDOWS\System32\CatRoot
[2010/11/21 14:10:51 | 000,000,000 | –SD | C] – C:\Documents and Settings\All Users\Application Data\Microsoft
[2010/11/21 14:10:51 | 000,000,000 | RH-D | C] – C:\Documents and Settings\All Users\Application Data
[2010/11/21 13:58:19 | 000,000,000 | —D | C] – C:\Documents and Settings
[2010/11/21 13:58:18 | 000,000,000 | -HSD | C] – C:\System Volume Information
[2010/11/21 13:45:51 | 000,000,000 | R-SD | C] – C:\WINDOWS\Fonts
[2010/11/21 13:45:51 | 000,000,000 | RHSD | C] – C:\WINDOWS\System32\dllcache
[2010/11/21 13:45:51 | 000,000,000 | R–D | C] – C:\WINDOWS\Web
[2010/11/21 13:45:51 | 000,000,000 | -H-D | C] – C:\WINDOWS\inf
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\WinSxS
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\wins
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\wbem
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\usmt
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\twain_32
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\Temp
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\system32
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\system
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\spool
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ShellExt
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Setup
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\security
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\Resources
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\repair
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ras
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\Provisioning
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\PeerNet
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\pchealth
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\oobe
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\npp
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\mui
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\mui
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\msapps
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\msagent
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\Media
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\java
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\inetsrv
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\IME
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\ime
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\icsxml
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ias
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\Help
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\export
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\etc
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\ehome
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\Driver Cache
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\disdn
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\dhcp
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\Debug
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\Cursors
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\Connection Wizard
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\config
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\Config
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\AppPatch
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\addins
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\3com_dmi
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\3076
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\2052
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1054
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1042
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1041
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1037
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1033
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1031
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1028
[2010/11/21 13:45:51 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1025
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010/11/22 15:39:51 | 000,359,929 | —- | M] () – C:\Documents and Settings\DaemonSkillz\Desktop\dds.scr
[2010/11/22 15:39:33 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Documents and Settings\DaemonSkillz\Desktop\HiJackThis.exe
[2010/11/22 15:33:23 | 000,320,673 | —- | M] () – C:\WINDOWS\System32\drivers\sfi.dat
[2010/11/22 15:32:59 | 000,575,488 | —- | M] (OldTimer Tools) – C:\Documents and Settings\DaemonSkillz\Desktop\OTL.exe
[2010/11/22 15:14:41 | 000,000,430 | —- | M] () – C:\WINDOWS\System32\drivers\etc\hosts.ics
[2010/11/22 15:13:28 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2010/11/22 15:11:09 | 000,380,684 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2010/11/22 15:11:09 | 000,053,098 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2010/11/22 14:46:57 | 000,000,135 | —- | M] () – C:\Documents and Settings\DaemonSkillz\Local Settings\Application Data\fusioncache.dat
[2010/11/22 13:28:09 | 001,081,344 | —- | M] () – C:\WINDOWS\System32\x
[2010/11/22 11:43:02 | 000,046,592 | —- | M] () – C:\WINDOWS\System32\hyuu.exe
[2010/11/21 16:31:27 | 000,000,804 | —- | M] () – C:\Documents and Settings\DaemonSkillz\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2010/11/21 16:30:47 | 000,003,584 | —- | M] () – C:\Documents and Settings\DaemonSkillz\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/11/21 16:14:38 | 000,004,625 | —- | M] () – C:\WINDOWS\imsins.BAK
[2010/11/21 15:50:49 | 000,000,815 | —- | M] () – C:\Documents and Settings\DaemonSkillz\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/11/21 15:44:33 | 000,013,646 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2010/11/21 15:44:33 | 000,013,646 | —- | M] () – C:\WINDOWS\System32\wpa.bak
[2010/11/21 15:36:43 | 000,001,668 | —- | M] () – C:\Documents and Settings\DaemonSkillz\Application Data\Microsoft\Internet Explorer\Quick Launch\3Connect.lnk
[2010/11/21 15:36:19 | 000,071,259 | —- | M] () – C:\WINDOWS\Huawei ModemsUninstall.exe
[2010/11/21 15:33:24 | 000,093,480 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2010/11/21 15:14:29 | 000,001,478 | —- | M] () – C:\Documents and Settings\DaemonSkillz\Application Data\Microsoft\Internet Explorer\Quick Launch\Media Center.lnk
[2010/11/21 15:11:41 | 000,316,640 | —- | M] () – C:\WINDOWS\WMSysPr9.prx
[2010/11/21 14:39:24 | 000,000,079 | —- | M] () – C:\Documents and Settings\DaemonSkillz\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
[2010/11/21 14:34:55 | 000,008,192 | —- | M] () – C:\WINDOWS\REGLOCS.OLD
[2010/11/21 14:33:54 | 000,000,261 | —- | M] () – C:\WINDOWS\System32\$winnt$.inf
[2010/11/21 14:29:50 | 000,002,577 | —- | M] () – C:\WINDOWS\System32\CONFIG.NT
[2010/11/21 14:29:50 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2010/11/21 14:29:50 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2010/11/21 14:29:50 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2010/11/21 14:29:50 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2010/11/21 14:29:38 | 000,023,392 | —- | M] () – C:\WINDOWS\System32\nscompat.tlb
[2010/11/21 14:29:38 | 000,016,832 | —- | M] () – C:\WINDOWS\System32\amcompat.tlb
[2010/11/21 14:29:26 | 000,004,161 | —- | M] () – C:\WINDOWS\ODBCINST.INI
[2010/11/21 14:24:05 | 000,021,640 | —- | M] () – C:\WINDOWS\System32\emptyregdb.dat
[2010/11/21 14:18:59 | 000,000,209 | -HS- | M] () – C:\boot.ini
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/11/22 15:39:50 | 000,359,929 | —- | C] () – C:\Documents and Settings\DaemonSkillz\Desktop\dds.scr
[2010/11/22 14:46:57 | 000,000,135 | —- | C] () – C:\Documents and Settings\DaemonSkillz\Local Settings\Application Data\fusioncache.dat
[2010/11/22 13:26:42 | 001,081,344 | —- | C] () – C:\WINDOWS\System32\x
[2010/11/22 11:42:50 | 000,046,592 | —- | C] () – C:\WINDOWS\System32\hyuu.exe
[2010/11/21 17:19:50 | 000,000,430 | —- | C] () – C:\WINDOWS\System32\drivers\etc\hosts.ics
[2010/11/21 16:31:27 | 000,000,804 | —- | C] () – C:\Documents and Settings\DaemonSkillz\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2010/11/21 16:30:46 | 000,003,584 | —- | C] () – C:\Documents and Settings\DaemonSkillz\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/11/21 16:30:02 | 000,178,176 | —- | C] () – C:\WINDOWS\System32\unrar.dll
[2010/11/21 16:30:01 | 000,000,038 | —- | C] () – C:\WINDOWS\avisplitter.ini
[2010/11/21 16:29:59 | 000,000,414 | —- | C] () – C:\WINDOWS\System32\lame_acm.xml
[2010/11/21 16:29:58 | 000,881,664 | —- | C] () – C:\WINDOWS\System32\xvidcore.dll
[2010/11/21 16:29:58 | 000,205,824 | —- | C] () – C:\WINDOWS\System32\xvidvfw.dll
[2010/11/21 16:29:56 | 000,085,504 | —- | C] () – C:\WINDOWS\System32\ff_vfw.dll
[2010/11/21 15:55:54 | 000,077,824 | —- | C] () – C:\Documents and Settings\DaemonSkillz\My Documents\Startup.exe
[2010/11/21 15:44:35 | 000,013,646 | —- | C] () – C:\WINDOWS\System32\wpa.bak
[2010/11/21 15:36:43 | 000,001,668 | —- | C] () – C:\Documents and Settings\DaemonSkillz\Application Data\Microsoft\Internet Explorer\Quick Launch\3Connect.lnk
[2010/11/21 15:36:19 | 000,071,259 | —- | C] () – C:\WINDOWS\Huawei ModemsUninstall.exe
[2010/11/21 15:36:17 | 000,010,240 | —- | C] () – C:\WINDOWS\System32\drivers\mdvrmng.sys
[2010/11/21 15:33:23 | 000,320,673 | —- | C] () – C:\WINDOWS\System32\drivers\sfi.dat
[2010/11/21 15:14:28 | 000,001,478 | —- | C] () – C:\Documents and Settings\DaemonSkillz\Application Data\Microsoft\Internet Explorer\Quick Launch\Media Center.lnk
[2010/11/21 14:39:24 | 000,000,079 | —- | C] () – C:\Documents and Settings\DaemonSkillz\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
[2010/11/21 14:39:18 | 000,000,815 | —- | C] () – C:\Documents and Settings\DaemonSkillz\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/11/21 14:34:55 | 000,008,192 | —- | C] () – C:\WINDOWS\REGLOCS.OLD
[2010/11/21 14:33:54 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2010/11/21 14:32:37 | 000,175,104 | —- | C] () – C:\WINDOWS\System32\dllcache\pintlcsa.dll
[2010/11/21 14:32:07 | 001,158,818 | —- | C] () – C:\WINDOWS\System32\dllcache\korwbrkr.lex
[2010/11/21 14:31:58 | 000,059,392 | —- | C] () – C:\WINDOWS\System32\dllcache\imscinst.exe
[2010/11/21 14:31:57 | 000,196,665 | —- | C] () – C:\WINDOWS\System32\dllcache\imjpinst.exe
[2010/11/21 14:31:55 | 000,134,339 | —- | C] () – C:\WINDOWS\System32\dllcache\imekr.lex
[2010/11/21 14:31:41 | 013,463,552 | —- | C] () – C:\WINDOWS\System32\dllcache\hwxjpn.dll
[2010/11/21 14:31:34 | 000,108,827 | —- | C] () – C:\WINDOWS\System32\dllcache\hanja.lex
[2010/11/21 14:31:29 | 000,094,208 | —- | C] () – C:\WINDOWS\System32\dllcache\fpencode.dll
[2010/11/21 14:31:12 | 000,173,568 | —- | C] () – C:\WINDOWS\System32\dllcache\chtskf.dll
[2010/11/21 14:30:51 | 000,004,639 | —- | C] () – C:\WINDOWS\System32\dllcache\mplayer2.exe
[2010/11/21 14:29:50 | 000,002,577 | —- | C] () – C:\WINDOWS\System32\CONFIG.NT
[2010/11/21 14:29:50 | 000,000,000 | RHS- | C] () – C:\MSDOS.SYS
[2010/11/21 14:29:50 | 000,000,000 | RHS- | C] () – C:\IO.SYS
[2010/11/21 14:29:50 | 000,000,000 | —- | C] () – C:\CONFIG.SYS
[2010/11/21 14:29:50 | 000,000,000 | —- | C] () – C:\AUTOEXEC.BAT
[2010/11/21 14:29:38 | 000,023,392 | —- | C] () – C:\WINDOWS\System32\nscompat.tlb
[2010/11/21 14:29:38 | 000,016,832 | —- | C] () – C:\WINDOWS\System32\amcompat.tlb
[2010/11/21 14:29:37 | 000,316,640 | —- | C] () – C:\WINDOWS\WMSysPr9.prx
[2010/11/21 14:27:12 | 004,399,505 | —- | C] () – C:\WINDOWS\System32\dllcache\nls302en.lex
[2010/11/21 14:26:43 | 000,048,680 | -HS- | C] () – C:\WINDOWS\winnt256.bmp
[2010/11/21 14:26:43 | 000,048,680 | -HS- | C] () – C:\WINDOWS\winnt.bmp
[2010/11/21 14:26:38 | 000,000,984 | —- | C] () – C:\WINDOWS\System32\dllcache\srframe.mmf
[2010/11/21 14:26:11 | 000,376,320 | —- | C] () – C:\WINDOWS\System32\dllcache\msinfo.dll
[2010/11/21 14:24:05 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2010/11/21 14:22:38 | 000,011,452 | —- | C] () – C:\WINDOWS\System32\mypixdx.chm
[2010/11/21 14:21:14 | 010,604,352 | —- | C] () – C:\WINDOWS\System32\dllcache\ehcir.ird
[2010/11/21 14:19:46 | 000,065,978 | —- | C] () – C:\WINDOWS\Soap Bubbles.bmp
[2010/11/21 14:19:46 | 000,065,954 | —- | C] () – C:\WINDOWS\Prairie Wind.bmp
[2010/11/21 14:19:46 | 000,065,832 | —- | C] () – C:\WINDOWS\Santa Fe Stucco.bmp
[2010/11/21 14:19:46 | 000,026,680 | —- | C] () – C:\WINDOWS\River Sumida.bmp
[2010/11/21 14:19:46 | 000,026,582 | —- | C] () – C:\WINDOWS\Greenstone.bmp
[2010/11/21 14:19:46 | 000,017,362 | —- | C] () – C:\WINDOWS\Rhododendron.bmp
[2010/11/21 14:19:46 | 000,017,336 | —- | C] () – C:\WINDOWS\Gone Fishing.bmp
[2010/11/21 14:19:46 | 000,017,062 | —- | C] () – C:\WINDOWS\Coffee Bean.bmp
[2010/11/21 14:19:46 | 000,016,730 | —- | C] () – C:\WINDOWS\FeatherTexture.bmp
[2010/11/21 14:19:46 | 000,009,522 | —- | C] () – C:\WINDOWS\Zapotec.bmp
[2010/11/21 14:19:46 | 000,001,272 | —- | C] () – C:\WINDOWS\Blue Lace 16.bmp
[2010/11/21 14:19:43 | 000,003,286 | —- | C] () – C:\WINDOWS\System32\tslabels.h
[2010/11/21 14:19:43 | 000,001,161 | —- | C] () – C:\WINDOWS\System32\usrlogon.cmd
[2010/11/21 14:19:42 | 000,000,768 | —- | C] () – C:\WINDOWS\System32\msdtcprf.h
[2010/11/21 14:19:36 | 000,063,488 | —- | C] () – C:\WINDOWS\System32\wmimgmt.msc
[2010/11/21 14:11:48 | 000,004,625 | —- | C] () – C:\WINDOWS\imsins.BAK
[2010/11/21 14:11:43 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2010/11/21 14:11:40 | 001,685,606 | —- | C] () – C:\WINDOWS\System32\dllcache\sam.spd
[2010/11/21 14:11:40 | 000,000,888 | —- | C] () – C:\WINDOWS\System32\dllcache\sam.sdf
[2010/11/21 14:11:39 | 000,643,717 | —- | C] () – C:\WINDOWS\System32\dllcache\ltts1033.lxa
[2010/11/21 14:11:39 | 000,605,050 | —- | C] () – C:\WINDOWS\System32\dllcache\r1033tts.lxa
[2010/11/21 14:11:24 | 000,001,688 | —- | C] () – C:\WINDOWS\System32\AUTOEXEC.NT
[2010/11/21 14:11:11 | 002,008,817 | —- | C] () – C:\WINDOWS\System32\dllcache\NT5.CAT
[2010/11/21 14:11:11 | 000,797,189 | —- | C] () – C:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2010/11/21 14:11:11 | 000,399,645 | —- | C] () – C:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2010/11/21 14:11:11 | 000,141,702 | —- | C] () – C:\WINDOWS\System32\dllcache\netfx.cat
[2010/11/21 14:11:11 | 000,130,715 | —- | C] () – C:\WINDOWS\System32\dllcache\mediactr.cat
[2010/11/21 14:11:11 | 000,110,116 | —- | C] () – C:\WINDOWS\System32\dllcache\tabletpc.cat
[2010/11/21 14:11:11 | 000,106,147 | —- | C] () – C:\WINDOWS\System32\dllcache\SP2.CAT
[2010/11/21 14:11:11 | 000,077,881 | —- | C] () – C:\WINDOWS\System32\dllcache\plus.cat
[2010/11/21 14:11:11 | 000,037,484 | —- | C] () – C:\WINDOWS\System32\dllcache\MW770.CAT
[2010/11/21 14:11:11 | 000,031,281 | —- | C] () – C:\WINDOWS\System32\dllcache\FP4.CAT
[2010/11/21 14:11:11 | 000,024,209 | —- | C] () – C:\WINDOWS\System32\dllcache\msn7.cat
[2010/11/21 14:11:11 | 000,017,916 | —- | C] () – C:\WINDOWS\System32\dllcache\sonic.cat
[2010/11/21 14:11:11 | 000,013,753 | —- | C] () – C:\WINDOWS\System32\dllcache\IMS.CAT
[2010/11/21 14:11:11 | 000,013,472 | —- | C] () – C:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2010/11/21 14:11:11 | 000,011,651 | —- | C] () – C:\WINDOWS\System32\dllcache\msn9.cat
[2010/11/21 14:11:11 | 000,009,581 | —- | C] () – C:\WINDOWS\System32\dllcache\MSMSGS.CAT
[2010/11/21 14:11:11 | 000,008,574 | —- | C] () – C:\WINDOWS\System32\dllcache\IASNT4.CAT
[2010/11/21 14:11:11 | 000,007,382 | —- | C] () – C:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2010/11/21 14:11:11 | 000,007,334 | —- | C] () – C:\WINDOWS\System32\dllcache\wmerrenu.cat
[2010/11/21 14:11:11 | 000,007,245 | —- | C] () – C:\WINDOWS\System32\dllcache\MSTSWEB.CAT
[2010/11/21 14:11:10 | 000,507,578 | —- | C] () – C:\WINDOWS\System32\dllcache\NT5INF.CAT
[2010/11/21 13:58:17 | 000,093,480 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2010/11/21 13:52:58 | 000,000,209 | -HS- | C] () – C:\boot.ini
[2010/11/21 13:52:53 | 000,000,261 | —- | C] () – C:\WINDOWS\System32\$winnt$.inf
[2006/03/15 12:00:00 | 000,168,509 | RHS- | C] () – C:\WINDOWS\System32\cvddqh.dll
[2006/03/15 12:00:00 | 000,027,440 | —- | C] () – C:\WINDOWS\System32\drivers\secdrv.sys
[2005/08/05 14:01:54 | 000,239,104 | —- | C] () – C:\WINDOWS\System32\psisdecd.dll

========== LOP Check ==========

[2010/11/21 15:38:50 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Birdstep Technology
[2010/11/21 16:21:21 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2010/11/21 15:38:45 | 000,000,000 | —D | M] – C:\Documents and Settings\DaemonSkillz\Application Data\Birdstep Technology

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2010/11/21 14:29:50 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2010/11/21 14:18:59 | 000,000,209 | -HS- | M] () – C:\boot.ini
[2010/11/21 14:29:50 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2010/11/21 14:29:50 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2010/11/21 14:29:50 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2006/03/15 12:00:00 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2006/03/15 12:00:00 | 000,250,032 | RHS- | M] () – C:\ntldr
[2010/11/22 15:13:26 | 1598,029,824 | -HS- | M] () – C:\pagefile.sys

< %systemroot%\Fonts\*.com >

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2010/11/21 14:29:02 | 000,000,067 | -HS- | M] () – C:\WINDOWS\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2010/11/21 13:52:57 | 000,094,208 | —- | M] () – C:\WINDOWS\system32\config\default.sav
[2010/11/21 13:52:57 | 000,659,456 | —- | M] () – C:\WINDOWS\system32\config\software.sav
[2010/11/21 13:52:57 | 000,892,928 | —- | M] () – C:\WINDOWS\system32\config\system.sav

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2010/11/21 14:29:58 | 000,000,294 | -HS- | M] () – C:\Documents and Settings\All Users\Start Menu\desktop.ini

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2010/11/21 15:14:29 | 000,000,170 | -HS- | M] () – C:\Documents and Settings\DaemonSkillz\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2010/11/21 14:39:24 | 000,000,079 | —- | M] () – C:\Documents and Settings\DaemonSkillz\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf

< %USERPROFILE%\Desktop\*.exe >
[2010/11/22 15:39:33 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Documents and Settings\DaemonSkillz\Desktop\HiJackThis.exe
[2010/11/22 15:32:59 | 000,575,488 | —- | M] (OldTimer Tools) – C:\Documents and Settings\DaemonSkillz\Desktop\OTL.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

< End of report >
Here is my Extras.txt

OTL Extras logfile created on: 22/11/2010 15:36:50 - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Documents and Settings\DaemonSkillz\Desktop
Windows XP Media Center Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy

1,014.00 Mb Total Physical Memory | 391.00 Mb Available Physical Memory | 39.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 75.00% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 37.25 Gb Total Space | 28.52 Gb Free Space | 76.55% Space Free | Partition Type: NTFS
Drive F: | 25.20 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: CHAOS | User Name: DaemonSkillz | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
htmlfile – Reg Error: Key error.
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 1
"FirewallDisableNotify" = 1
"UpdatesDisableNotify" = 1
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2805:TCP" = 2805:TCP:*:Enabled:ypyjqj
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\iTunes\iTunes.exe" = C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes – (Apple Inc.)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0CB9668D-F979-4F31-B8B8-67FE90F929F8}" = Bonjour
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3D9892BB-A751-4E48-ADC8-E4289956CE1D}" = QuickTime
"{85991ED2-010C-4930-96FA-52F43C2CE98A}" = Apple Mobile Device Support
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel® Graphics Media Accelerator Driver for Mobile
"{91F7F3F3-CE80-48C3-8327-7D24A0A5716A}" = iTunes
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A899DA1F-D626-401C-8651-F2921E3B4CB3}" = 3Connect
"{B2D328BE-45AD-4D92-96F9-2151490A203E}" = Apple Application Support
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{FD8E178D-8B4E-42DA-B434-EFF270329B1C}" = COMODO Internet Security
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"CNXT_MODEM_PCI_VEN_8086&DEV_266D&SUBSYS_107D1734" = SoftV92 Data Fax Modem with SmartCP
"Conexant PCI Audio" = Conexant AC-Link Audio
"Huawei Modems" = Huawei modem
"ie8" = Windows Internet Explorer 8
"KLiteCodecPack_is1" = K-Lite Codec Pack 5.1.0 (Full)
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Windows Media Format Runtime" = Windows Media Format Runtime
"WinRAR archiver" = WinRAR archiver

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 21/11/2010 10:24:39 | Computer Name = CHAOS | Source = ASP.NET 1.0.3705.6018 | ID = 1031
Description =

Error - 21/11/2010 13:15:46 | Computer Name = CHAOS | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: The server name or address could not be resolved

Error - 22/11/2010 10:52:07 | Computer Name = CHAOS | Source = Media Center Guide | ID = 9
Description = Event Info: Connection not working. Media Center was unable to connect
to the Internet. See Help for more information. Process: DefaultDomain Object Name:
Microsoft.Ehome.Epg.Ehepgdat

[ System Events ]
Error - 21/11/2010 11:13:34 | Computer Name = CHAOS | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 14 minutes. NtpClient has no source of accurate
time.

Error - 21/11/2010 11:33:45 | Computer Name = CHAOS | Source = W32Time | ID = 39452689
Description = Time Provider NtpClient: An error occurred during DNS lookup of the
manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup
again in 15 minutes. The error was: A socket operation was attempted to an unreachable
host. (0x80072751)

Error - 21/11/2010 11:33:45 | Computer Name = CHAOS | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 14 minutes. NtpClient has no source of accurate
time.

Error - 22/11/2010 07:45:26 | Computer Name = CHAOS | Source = Service Control Manager | ID = 7032
Description = The Service Control Manager tried to take a corrective action (Restart
the service) after the unexpected termination of the Windows Management Instrumentation
service, but this action failed with the following error: %%1056

Error - 22/11/2010 09:43:09 | Computer Name = CHAOS | Source = Service Control Manager | ID = 7023
Description = The Center Installer service terminated with the following error:
%%1114

Error - 22/11/2010 09:54:09 | Computer Name = CHAOS | Source = Service Control Manager | ID = 7023
Description = The Center Installer service terminated with the following error:
%%1114

Error - 22/11/2010 10:03:22 | Computer Name = CHAOS | Source = Service Control Manager | ID = 7023
Description = The Center Installer service terminated with the following error:
%%1114

Error - 22/11/2010 10:09:41 | Computer Name = CHAOS | Source = Service Control Manager | ID = 7023
Description = The Center Installer service terminated with the following error:
%%1114

Error - 22/11/2010 10:40:20 | Computer Name = CHAOS | Source = Service Control Manager | ID = 7023
Description = The Center Installer service terminated with the following error:
%%1114

Error - 22/11/2010 11:15:08 | Computer Name = CHAOS | Source = Service Control Manager | ID = 7023
Description = The Center Installer service terminated with the following error:
%%1114


< End of report >
Hello,
Welcome to WhatTheTech. My name is mowman, and I will be helping you fix your problems.

If you do not make a reply in 3 days, we will have to close your topic.

You may want to keep the link to this topic in your favorites. Alternatively, you can click the Options button at the top bar of this topic and Track this topic. The topics you are tracking can be found by clicking on My Topics at the top of any page.

Please take note of some guidelines for this fix:

•Refrain from making any changes to your computer including installing/uninstall programs, deleting files, modifying the registry, and running scanners or tools. Doing so could cause changes to the directions I have to give you and prolong the time required. Further more, you should not be taking any advice relating to this computer from any other source throughout the course of this fix.
•If you do not understand any step(s) provided, please do not hesitate to ask before continuing. I would much rather clarify instructions or explain them differently than have something important broken.
•Even if things appear to be better, it might not mean we are finished. Please continue to follow my instructions and reply back until I give you the "all clean". We do not want to clean you part-way, only to have the system re-infect itself.
•Please reply using the button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply.
Only attach them if requested or if they do not fit into the post






[external image: Posted Image]
Download GMER Rootkit Scanner from here or here.
  • Extract the contents of the zipped file to desktop.
  • Double click GMER.exe. If asked to allow gmer.sys driver to load, please consent .
  • If it gives you a warning about rootkit activity and asks if you want to run scan…click on NO.

    [external image: Posted Image]
    Click the image to enlarge it
  • In the right panel, you will see several boxes that have been checked. Uncheck the following …
    • IAT/EAT
    • Drives/Partition other than Systemdrive (typically C:\)
    • Show All (don't miss this one)
  • Then click the Scan button & wait for it to finish.
  • Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
  • Save it where you can easily find it, such as your desktop, and post it in your reply.
**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<— ROOKIT" entries


If GMER won't run try with devices unchecked.If still no go try in safe mode.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI